{
 "id": "WPSEC-2026-2533",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2533/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2533/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2533/index.md",
 "title": "JS Help Desk <= 5.0.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Erase Data Request Reassignment",
 "description": "The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to Insecure Direct Object Reference via the GDPR erase data request form ('saveusereraserequest' task) in all versions up to, and including, 5.0.3, due to the storeUserEraseRequest() function storing every posted field, including the user ID ('uid'), status and creation date, when a user edits their existing erase request. This makes it possible for authenticated attackers, with subscriber-level access and above, to point their erase request at another user. When an administrator acts on the request with 'Erase identifying data' or 'Delete data', the other user's help desk data is anonymized or deleted.",
 "plugin": {
  "slug": "js-support-ticket",
  "name": "JS Help Desk",
  "full_name": "JS Help Desk – AI-Powered Support & Ticketing System",
  "wordpress_org": "https://wordpress.org/plugins/js-support-ticket/",
  "advisories_url": "https://wpsec.com/vuln/plugin/js-support-ticket/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/js-support-ticket"
 },
 "type": "IDOR",
 "cwe": [
  "CWE-639"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 4.6,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": "2.1.7",
    "from_inclusive": true,
    "to": "5.0.4",
    "to_inclusive": false
   }
  ],
  "text": [
   "from 2.1.7 before 5.0.4"
  ]
 },
 "introduced_in": "2.1.7",
 "fixed_in": "5.0.4",
 "remediation": "Update to 5.0.4 or later.",
 "fix_released": "2026-11-04T04:20:20+00:00",
 "published": "2026-11-05T04:45:23+00:00",
 "updated": "2026-11-04T13:58:24.947595+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2533/",
  "https://plugins.svn.wordpress.org/js-support-ticket/tags/5.0.4/",
  "https://wordpress.org/plugins/js-support-ticket/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/js-support-ticket",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "Low",
  "as_of": "2026-11-05"
 }
}