CVE-2026-112218: WordPress Majestic Support plugin <= 1.2.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through 1.2.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
wordpress/majestic-supportto a version that resolves this vulnerability.Fixed in 1.2.2
Event History
Frequently Asked Questions
Who can exploit this issue?
The published vector indicates that it can be exploited remotely without authentication, user interaction, or prior privileges.
What is the potential impact?
The reported impact is limited to integrity: an attacker may be able to make unauthorized changes. No confidentiality or availability impact is indicated by the supplied severity vector.
Which versions are affected?
Majestic Support versions through 1.2.1 are affected. The affected-version information does not identify a fixed version.