CVE-2026-14931 — JS Help Desk < 3.1.4 - Contributor+ User Email Disclosure

CVE-2026-14931

JS Help Desk < 3.1.4 - Contributor+ User Email Disclosure PUBLISHED

Description (CNA)

The JS Help Desk WordPress plugin before 3.1.4 grants a support-agent capability to the Contributor role on activation and does not perform a capability check on a user-listing handler, allowing Contributor-level users to enumerate the email addresses of all registered WordPress users.

Affected (CNA)

Vendor / product	Versions
Unknown / JS Help Desk	affected 0 before 3.1.4

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/852375ba-b8f5-4fef-8a37-d889d97227f0/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.