CVE-2026-15932 – Support Genix Lite < 1.4.48 – Unauthenticated Arbitrary File Read via Path Traversal

CVE ID :CVE-2026-15932

Published : Aug. 1, 2026, 7:16 a.m. | 33 minutes ago

Description :The Support Genix WordPress plugin before 1.4.48 does not prevent directory traversal in its ticket-attachment download route, allowing unauthenticated attackers to read arbitrary files with an allowlisted extension — including other users’ private ticket attachments — from the server.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…