CVE-2026-112218
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
The Majestic Support plugin by Ahmad Majestic, versions up to 1.2.1, contains a Missing Authorization vulnerability that allows exploitation of incorrectly configured access control security levels.
Risk Assessment
An attacker could access support functionality or data they should not be authorized for, potentially compromising ticket confidentiality.
Recommendation
Update the Majestic Support plugin to a version newer than 1.2.1 once released and review permission configuration.
Other vulnerabilities in Majestic Support
See all- CVE-2026-102382Medium
The Majestic Support plugin for WordPress contains an Authorization Bypass Through User-Controlled Key vulnerability in versions up to and including 1.2.0. Incorrectly configured access control levels may allow unauthorized access to resources.
- CVE-2026-102381Medium
The Majestic Support plugin for WordPress contains a Missing Authorization vulnerability in versions up to and including 1.2.0. Incorrectly configured access control levels may allow unauthorized users to perform operations they are not permitted to.
- CVE-2026-13262Medium
The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin for WordPress is vulnerable to generic SQL injection via the 'val' parameter in versions up to and including 1.1.9 due to insufficient escaping and lack of query preparation. This allows unauthenticated attackers to append additional SQL queries, potentially extracting sensitive database information.
- CVE-2026-57646Medium
Insecure Direct Object References (IDOR) vulnerability in Majestic Support versions up to 1.1.7 allows subscribers to access other users' resources by manipulating object identifiers.
- CVE-2025-49860Medium
The Majestic Support plugin in versions up to 1.1.0 contains a missing authorization vulnerability that can lead to unauthorized access.
Original NVD description (English source)
Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through 1.2.1.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS