What is GHSA-rr3h-2v3g-4rp9?

GHSA-rr3h-2v3g-4rp9 is a security advisory published by GitHub Security Advisories with Medium severity. The JS Help Desk WordPress plugin before 3.1.5 does not verify that the requesting user owns the...

Which CVE IDs does GHSA-rr3h-2v3g-4rp9 cover?

GHSA-rr3h-2v3g-4rp9 covers the following CVE IDs: CVE-2026-15209. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-rr3h-2v3g-4rp9?

GHSA-rr3h-2v3g-4rp9 has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-rr3h-2v3g-4rp9MediumCVSS 6.5

The JS Help Desk WordPress plugin before 3.1.5 does not verify that the requesting user owns the...

Vendor

GitHub Security Advisories

Published

July 31, 2026

Last Modified

July 31, 2026

🔗 CVE IDs covered (1)

CVE-2026-15209 →

📋 Description

The JS Help Desk WordPress plugin before 3.1.5 does not verify that the requesting user owns the ticket being loaded: a low-privileged authenticated user can supply another user's ticket ID and read that ticket's contents, including the reporter's PII and message body.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-15209
https://wpscan.com/vulnerability/3665b8dd-2b02-4c3b-b024-f1e07f934fab
https://github.com/advisories/GHSA-rr3h-2v3g-4rp9