Security Advisory

CVE-2026-14197

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-01 06:00:08

Last updated 2026-08-01 06:00:08

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Fluent Support WordPress plugin before 2.3.1 does not perform a per-ticket access check before reassigning a ticket's customer, allowing a restricted support agent to change the assigned customer of any ticket in the system, including tickets outside their granted scope.

← Browse all CVEs View on cve.org ↗