CVE-2026-110895
HighCVSS 8.5Summary
The Support Genix plugin (up to version 1.4.54) is vulnerable to SQL injection due to improper neutralization of special elements in SQL commands. An attacker can execute arbitrary SQL queries.
Risk Assessment
This can lead to data leakage, modification, or deletion of database data. In severe cases, server takeover is possible.
Recommendation
Update the Support Genix plugin to the latest version that fixes this vulnerability. Consider a security audit of the database.
Other vulnerabilities in Support Genix
See all- CVE-2026-19806High
The Support Genix plugin for WordPress up to version 1.4.52 is vulnerable to authentication bypass leading to administrator account takeover via the guest_ticket_login() function and its p parameter. The site-wide AES-256-CBC encryption key is derived from only three two-digit wp_rand(10, 99) values and a Unix timestamp via md5(), yielding approximately 19.5 bits of entropy, combined with a deterministic IV. This allows authenticated attackers with subscriber-level access and above, who can obtain a single legitimate guest ticket token as a known-plaintext oracle, to recover the encryption key and forge a token for an administrator, leading to full administrative access.
- CVE-2026-15932Medium
The Support Genix WordPress plugin before version 1.4.48 does not prevent directory traversal in its ticket-attachment download route, allowing unauthenticated attackers to read arbitrary files with an allowlisted extension, including other users' private ticket attachments.
Original NVD description (English source)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems Support Genix support-genix-lite allows SQL Injection.This issue affects Support Genix: from n/a through 1.4.54.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS