Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin

Information

Software Type Plugin
Software Slug majestic-support (view on wordpress.org)
Software Status Active
Software Author ahmadmj
Software Website www.majesticsupport.com
Software Downloads 129,653
Software Active Installs 3,000
Software Record Last Updated August 9, 2026

10 Vulnerabilities

Submit a Vulnerability
Majestic Support <= 1.1.9 - Authenticated (Subscriber+) SQL Injection via 'val' Parameter
6.5
CVE-2026-13262
Jul 10, 2026
Researcher: CHOIGYEONGMIN
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.1.7 - Authenticated (Subscriber+) Insecure Direct Object Reference
4.3
CVE-2026-57646
Jun 26, 2026
Researcher: William Matos
Majestic Support <= 1.1.2 - Missing Authorization
5.3
CVE-2026-40778
Apr 9, 2026
Researcher: Jakub Herman
Majestic Support <= 1.1.0 - Missing Authorization
5.3
CVE-2025-49860
Jun 12, 2025
Researcher: Fariq Fadillah Gusti Insani (fariqfgi)
Majestic Support <= 1.1.0 - Unauthenticated SQL Injection
7.5
CVE-2025-48283
May 22, 2025
Researcher: LVT-tholv2k
Majestic Support <= 1.1.0 - Missing Authorization
5.3
CVE-2025-48282
May 19, 2025
Researcher: LVT-tholv2k
Majestic Support <= 1.0.7 - Authenticated (Contributor+) Local File Inclusion
7.5
CVE-2025-64284
Apr 22, 2025
Researcher: Trương Hữu Phúc (truonghuuphuc)
Majestic Support <= 1.0.6 - Unauthenticated Local File Inclusion
9.8
CVE-2025-26985
Feb 23, 2025
Researcher: Trương Hữu Phúc (truonghuuphuc)
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.0.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
7.5
CVE-2024-13600
Feb 11, 2025
Researcher: Tim Coen
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.0.5 - Authenticated (Subscriber+) Insecure Direct Object Reference
4.3
CVE-2024-13601
Feb 11, 2025
Researcher: Tim Coen
Title Status CVE ID CVSS Researchers Date
Majestic Support <= 1.1.9 - Authenticated (Subscriber+) SQL Injection via 'val' Parameter Patched CVE-2026-13262 6.5 CHOIGYEONGMIN July 10, 2026
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.1.7 - Authenticated (Subscriber+) Insecure Direct Object Reference Patched CVE-2026-57646 4.3 William Matos June 26, 2026
Majestic Support <= 1.1.2 - Missing Authorization Patched CVE-2026-40778 5.3 Jakub Herman April 9, 2026
Majestic Support <= 1.1.0 - Missing Authorization Patched CVE-2025-49860 5.3 Fariq Fadillah Gusti Insani (fariqfgi) June 12, 2025
Majestic Support <= 1.1.0 - Unauthenticated SQL Injection Patched CVE-2025-48283 7.5 LVT-tholv2k May 22, 2025
Majestic Support <= 1.1.0 - Missing Authorization Patched CVE-2025-48282 5.3 LVT-tholv2k May 19, 2025
Majestic Support <= 1.0.7 - Authenticated (Contributor+) Local File Inclusion Patched CVE-2025-64284 7.5 Trương Hữu Phúc (truonghuuphuc) April 22, 2025
Majestic Support <= 1.0.6 - Unauthenticated Local File Inclusion Patched CVE-2025-26985 9.8 Trương Hữu Phúc (truonghuuphuc) February 23, 2025
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.0.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory Patched CVE-2024-13600 7.5 Tim Coen February 11, 2025
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.0.5 - Authenticated (Subscriber+) Insecure Direct Object Reference Patched CVE-2024-13601 4.3 Tim Coen February 11, 2025

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation