Unknown Support Genix vulnerabilities
2 CVEs affecting Unknown Support Genix, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-15932, published 2026-08-01.
More from Unknown.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2026-15932, published 2026-08-01. Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days. The Support Genix WordPress plugin before 1.4.48 does not prevent directory traversal in its ticket-attachment download route, allowing unauthenticated attackers to read arbitrary files with an…
- CVE-2026-14862, published 2026-07-31. Low severity, CVSS 3.7. EPSS: 0.3% chance of exploitation in the next 30 days. The Support Genix WordPress plugin before 1.4.48 does not properly authorize access to support-ticket attachment downloads, allowing unauthenticated users who obtain the stored attachment file name…