CVE-2026-13262
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin for WordPress is vulnerable to generic SQL injection via the 'val' parameter in versions up to and including 1.1.9 due to insufficient escaping and lack of query preparation. This allows unauthenticated attackers to append additional SQL queries, potentially extracting sensitive database information.
Risk Assessment
The risk involves potential theft of customer data, passwords, or other confidential information stored in the WordPress database, which could compromise user privacy and damage organizational reputation.
Recommendation
Immediately update the Majestic Support plugin to the latest available version that fixes this vulnerability. If no update is available, temporarily disable the plugin until a patch is released.
Other vulnerabilities in Majestic Support
See all- CVE-2026-102382Medium
The Majestic Support plugin for WordPress contains an Authorization Bypass Through User-Controlled Key vulnerability in versions up to and including 1.2.0. Incorrectly configured access control levels may allow unauthorized access to resources.
- CVE-2026-102381Medium
The Majestic Support plugin for WordPress contains a Missing Authorization vulnerability in versions up to and including 1.2.0. Incorrectly configured access control levels may allow unauthorized users to perform operations they are not permitted to.
- CVE-2026-57646Medium
Insecure Direct Object References (IDOR) vulnerability in Majestic Support versions up to 1.1.7 allows subscribers to access other users' resources by manipulating object identifiers.
Original NVD description (English source)
The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to generic SQL Injection via the 'val' parameter in all versions up to, and including, 1.1.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Exploitation requires a valid 'get-smart-reply' nonce, which any Subscriber-level user can obtain by creating a ticket via the public frontend and visiting the resulting ticket detail page, making this effectively exploitable by any authenticated user.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS