CVE-2026-62024: WordPress CodeBard Help Desk plugin <= 1.1.2 - Arbitrary File Upload vulnerability

Q: Which users could exploit this issue?

The vulnerability is exploitable by users with the Subscriber role, so it requires an authenticated low-privilege account.

Q: Can it be exploited remotely without user interaction?

Yes. The vector is network-accessible, requires low attack complexity, and does not require user interaction; however, the attacker must first authenticate as a Subscriber or equivalent low-privilege user.

Q: What is the potential impact of a successful upload?

A successful exploit can compromise confidentiality, integrity, and availability at a high level, with impact extending beyond the vulnerable component.

Published Oct 10, 2026

Updated

Subscriber Arbitrary File Upload in CodeBard Help Desk <= 1.1.2 versions.

Affected Software

1 affected component

Codebard CodeBard Help Desk<=1.1.2

Event History

Oct 10, 2026

CVE Published

via MITRE·07:35 PM

Data Sourced

via MITRE·07:35 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which users could exploit this issue?

The vulnerability is exploitable by users with the Subscriber role, so it requires an authenticated low-privilege account.

Can it be exploited remotely without user interaction?

Yes. The vector is network-accessible, requires low attack complexity, and does not require user interaction; however, the attacker must first authenticate as a Subscriber or equivalent low-privilege user.

What is the potential impact of a successful upload?

A successful exploit can compromise confidentiality, integrity, and availability at a high level, with impact extending beyond the vulnerable component.

CVE-2026-62024: WordPress CodeBard Help Desk plugin <= 1.1.2 - Arbitrary File Upload vulnerability

Affected Software

Event History

Frequently Asked Questions

Which users could exploit this issue?

Can it be exploited remotely without user interaction?

What is the potential impact of a successful upload?

Company

Resources

Contact

Frequently Asked Questions

Which users could exploit this issue?

Can it be exploited remotely without user interaction?

What is the potential impact of a successful upload?