WPOmnia vulnerabilities

Products

• KB Support 2
• KB Support – WordPress Help Desk and Knowledge Base 1

Latest WPOmnia CVEs

Newest publication first

1. CVE-2024-33589 WordPress KB Support plugin <= 1.6.0 - Broken Access Control vulnerability

   Published 2024-04-29

   Medium·CVSS 6.5

   Missing Authorization vulnerability in WPOmnia KB Support.This issue affects KB Support: from n/a through 1.6.0.

2. CVE-2023-37890 WordPress KB Support Plugin <= 1.5.88 is vulnerable to Broken Access Control

   Published 2023-11-30

   Medium·CVSS 4.3

   Missing Authorization vulnerability in WPOmnia KB Support – WordPress Help Desk and Knowledge Base allows Accessing Functionality Not Properly Constrained by ACLs. Users with a role as low as a subscriber can view other customers.This issue affects KB Support – WordPress Help Des...

3. CVE-2023-25983 WordPress KB Support Plugin <= 1.5.84 is vulnerable to CSV Injection

   Published 2023-11-07

   High·CVSS 8.8

   Improper Neutralization of Formula Elements in a CSV File vulnerability in WPOmnia KB Support.This issue affects KB Support: from n/a through 1.5.84.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.