CVE-2026-102381
MediumCVSS 5.3Summary
The Majestic Support plugin for WordPress contains a Missing Authorization vulnerability in versions up to and including 1.2.0. Incorrectly configured access control levels may allow unauthorized users to perform operations they are not permitted to.
Risk Assessment
Risk includes unauthorized access to administrative functions, modification of settings or data, which can lead to integrity and confidentiality breaches.
Recommendation
Update the Majestic Support plugin to the latest version that includes the security fix.
Other vulnerabilities in Majestic Support
See all- CVE-2026-102382Medium
The Majestic Support plugin for WordPress contains an Authorization Bypass Through User-Controlled Key vulnerability in versions up to and including 1.2.0. Incorrectly configured access control levels may allow unauthorized access to resources.
- CVE-2026-57646Medium
Insecure Direct Object References (IDOR) vulnerability in Majestic Support versions up to 1.1.7 allows subscribers to access other users' resources by manipulating object identifiers.
- CVE-2026-13262Medium
The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin for WordPress is vulnerable to generic SQL injection via the 'val' parameter in versions up to and including 1.1.9 due to insufficient escaping and lack of query preparation. This allows unauthenticated attackers to append additional SQL queries, potentially extracting sensitive database information.
Original NVD description (English source)
Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through 1.2.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS