JS Help Desk Plugin User Enumeration Vulnerability

Executive Summary

This vulnerability in the JS Help Desk WordPress plugin before version 3.1.4 allows Contributor-level users to access and enumerate the email addresses of all registered WordPress users. The plugin incorrectly grants a 'support-agent' capability to Contributors upon activation without proper validation. An attacker with Contributor access can exploit this by sending a specific AJAX request to retrieve user emails.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if your WordPress site uses the JS Help Desk plugin version before 3.1.4. Log in as a Contributor-level user and attempt to access user email addresses via AJAX requests. If emails are disclosed without proper authorization, the vulnerability exists.

Useful 0 Not Useful 0

Impact Analysis

If you use the JS Help Desk plugin before version 3.1.4, an attacker with Contributor-level access could obtain the email addresses of all registered users on your WordPress site. This could lead to phishing attacks, spam, or further exploitation of user accounts.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could violate GDPR by exposing personal data (email addresses) without consent. For HIPAA, if user emails are tied to protected health information, unauthorized disclosure may breach compliance. Organizations must ensure user data protection to meet regulatory requirements.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update the JS Help Desk plugin to version 3.1.4 or later. Review user roles to ensure Contributors do not have unnecessary capabilities. Remove the 'support-agent' capability from Contributors if not required.

Useful 0 Not Useful 0