Arbitrary File Upload Vulnerability in CodeBard Help Desk by WordPress
CVE-2026-62024

9.9CRITICAL

Key Information:

Vendor

WordPress
Status
Codebard Help Desk
Vendor
CVE Published:
10 October 2026

What is CVE-2026-62024?

The CodeBard Help Desk plugin for WordPress is susceptible to an arbitrary file upload vulnerability in versions up to 1.1.2. This weakness allows unauthorized users to upload potentially malicious files, which could lead to further exploitation of the site. As a result, this poses a significant risk for websites utilizing this plugin, possibly allowing attackers to execute scripts, compromise sensitive data, and gain unauthorized access.

Affected Version(s)

CodeBard Help Desk <= 1.1.2

References

https://patchstack.com/database/wordpress/plugin/codebard...
vdb-entry

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

JunHee CHO | Patchstack Bug Bounty Program
.