William Matos

**Name of the Vulnerable Software and Affected Versions** Majestic Support versions prior to 1.1.8 **Description** An Insecure Direct Object Reference (IDOR) exists due to missing validation on a user-controlled key. This allows authenticated attackers with Subscriber-level access or higher to perform unauthorized actions. **Recommendations** Update to a version newer than 1.1.7.

**Name of the Vulnerable Software and Affected Versions** JS Help Desk versions prior to 3.1.1 **Description** The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress contains an Insecure Direct Object Reference (IDOR) flaw. This occurs due to missing validation on a user-controlled key, allowing unauthenticated attackers to perform unauthorized actions. **Recommendations** Update the plugin to a version newer than 3.1.0.