CVE-2025-49860
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
The Majestic Support plugin in versions up to 1.1.0 contains a missing authorization vulnerability that can lead to unauthorized access.
Risk Assessment
An attacker may gain access to functions or data they are not authorized to access, potentially leading to a security breach.
Recommendation
Update Majestic Support to a patched version or review and fix access control configuration.
Other vulnerabilities in Majestic Support
See all- CVE-2026-102382Medium
The Majestic Support plugin for WordPress contains an Authorization Bypass Through User-Controlled Key vulnerability in versions up to and including 1.2.0. Incorrectly configured access control levels may allow unauthorized access to resources.
- CVE-2026-102381Medium
The Majestic Support plugin for WordPress contains a Missing Authorization vulnerability in versions up to and including 1.2.0. Incorrectly configured access control levels may allow unauthorized users to perform operations they are not permitted to.
- CVE-2026-112218Medium
The Majestic Support plugin by Ahmad Majestic, versions up to 1.2.1, contains a Missing Authorization vulnerability that allows exploitation of incorrectly configured access control security levels.
- CVE-2026-13262Medium
The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin for WordPress is vulnerable to generic SQL injection via the 'val' parameter in versions up to and including 1.1.9 due to insufficient escaping and lack of query preparation. This allows unauthenticated attackers to append additional SQL queries, potentially extracting sensitive database information.
- CVE-2026-57646Medium
Insecure Direct Object References (IDOR) vulnerability in Majestic Support versions up to 1.1.7 allows subscribers to access other users' resources by manipulating object identifiers.
Original NVD description (English source)
Missing Authorization vulnerability in Majestic Support Majestic Support majestic-support.This issue affects Majestic Support: from n/a through <= 1.1.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS