Subscriber Arbitrary File Upload in CodeBard Help Desk

Executive Summary

CVE-2026-62024 is an Arbitrary File Upload vulnerability in the CodeBard Help Desk WordPress plugin versions 1.1.2 and below. It allows attackers with subscriber-level access to upload malicious files to the server, which can lead to full server compromise.

Useful 0 Not Useful 0

Detection Guidance

Check for unauthorized file uploads in the WordPress uploads directory, particularly files with unusual extensions or names. Review server logs for POST requests to /wp-admin/admin-ajax.php with suspicious parameters. Use tools like grep to search for 'subscriber' role actions in logs.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow attackers to upload malicious files, potentially leading to full server compromise. It poses a significant risk for mass-exploitation campaigns targeting WordPress sites, especially since there is no official patch available as of the report date.

Useful 0 Not Useful 0

Mitigation Strategies

Apply Patchstack's emergency mitigation rule if available. Restrict subscriber-level access to only trusted users. Monitor for unusual file uploads and server activity. Consider temporarily disabling the plugin until an official patch is released.

Useful 0 Not Useful 0