CVE-2026-57652

Unauthenticated Insecure Direct Object References (IDOR) in JS Help Desk <= 3.1.0 versions.

Credits

William Matos | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/js-support-ticket/vulnerability/wordpress-js-help-desk-plugin-3-1-0-insecure-direct-object-references-idor-vulnerability?_s_id=cve