What is GHSA-g256-5g3w-9rv9?

GHSA-g256-5g3w-9rv9 is a security advisory published by GitHub Security Advisories with Medium severity. The JS Help Desk WordPress plugin before 3.1.4 does not verify ownership of the targeted reply...

Which CVE IDs does GHSA-g256-5g3w-9rv9 cover?

GHSA-g256-5g3w-9rv9 covers the following CVE IDs: CVE-2026-14929. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-g256-5g3w-9rv9?

GHSA-g256-5g3w-9rv9 has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

GHSA-g256-5g3w-9rv9MediumCVSS 4.3

The JS Help Desk WordPress plugin before 3.1.4 does not verify ownership of the targeted reply...

Vendor

GitHub Security Advisories

Published

July 31, 2026

Last Modified

July 31, 2026

🔗 CVE IDs covered (1)

CVE-2026-14929 →

📋 Description

The JS Help Desk WordPress plugin before 3.1.4 does not verify ownership of the targeted reply before updating it, allowing any authenticated user (Subscriber and above) to overwrite the content of any support-ticket reply on the site.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-14929
https://wpscan.com/vulnerability/2d786e43-6dbc-4d63-844e-2ca1384cdfd3
https://github.com/advisories/GHSA-g256-5g3w-9rv9