Vulnerability in Support Genix

CVE-2026-15932

The Support Genix WordPress plugin before 1.4.48 does not prevent directory traversal in its ticket-attachment download route, allowing unauthenticated attackers to read arbitrary files with an allowlisted extension — including other user…

Affected products

  • Unknown Support Genix — versions 0

References