What is CVE-2026-14929?

CVE-2026-14929 is a medium-severity vulnerability in Js Help Desk, classified under Incorrect Authorization. CVSS score: 4.3/10. Published 2026-07-31.

How severe is CVE-2026-14929?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Auth bypass in Js Help Desk

CVE-2026-14929

The JS Help Desk WordPress plugin before 3.1.4 does not verify ownership of the targeted reply before updating it, allowing any authenticated user (Subscriber and above) to overwrite the content of any support-ticket reply on the site.

Vulnerability class: Broken Access Control

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N.

Affected products

Unknown Js Help Desk — versions 0

Weakness classification (CWE)

CWE-863 — Incorrect Authorization

References

contact@wpscan.com (technical-description, exploit, vdb-entry)

Frequently asked questions

What is CVE-2026-14929?: CVE-2026-14929 is a medium-severity vulnerability in Js Help Desk, classified under Incorrect Authorization. CVSS score: 4.3/10. Published 2026-07-31.
How severe is CVE-2026-14929?: Medium severity. CVSS v3 base score is 4.3 out of 10.