JH
Product
JS Help Desk
16
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 7Medium 4Low 0
Watch
Add JS Help Desk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-30886 | 10.0 | Apr 1 | WordPress JS Help Desk plugin <= 2.9.2 - SQL Injection vulnerability Affected: through 2.9.2 |
| CVE-2024-43274 | 9.8 | Nov 1 | WordPress JS Help Desk – The Ultimate Help Desk plugin <= 2.8.6 - Broken Access Control vulnerability Affected: before 2.8.7 |
| CVE-2025-30878 | 9.1 | Apr 1 | WordPress JS Help Desk plugin <= 2.9.2 - Arbitrary File Deletion vulnerability Affected: through 2.9.2 |
| CVE-2022-46838 | 9.1 | Dec 13 | WordPress JS Help Desk plugin <= 2.7.1 - Unauthenticated Settings Change Vulnerability Affected: before 2.7.2 |
| CVE-2023-25444 | 9.1 | May 17 | WordPress JS Help Desk – Best Help Desk & Support Plugin plugin <= 2.7.7 - Arbitrary File Upload vulnerability Affected: before 2.7.8 |
| CVE-2018-21002 | 8.8 | Aug 27 | The js-support-ticket plugin before 2.0.6 for WordPress has CSRF Affected: before 2.0.6 |
| CVE-2022-47151 | 8.6 | Apr 17 | WordPress JS Help Desk plugin <= 2.7.1 - Unauth. SQL Injection Vulnerability Affected: before 2.7.2 |
| CVE-2026-32534 | 8.5 | Mar 25 | WordPress JS Help Desk plugin <= 3.0.3 - SQL Injection vulnerability Affected: through <= 3.0.3 |
| CVE-2026-24959 | 8.5 | Feb 20 | WordPress JS Help Desk plugin <= 3.0.1 - SQL Injection vulnerability Affected: through 3.0.1 |
| CVE-2025-30901 | 8.1 | Apr 1 | WordPress JS Help Desk plugin <= 2.9.2 - Local File Inclusion vulnerability Affected: through 2.9.2 |
| CVE-2025-30882 | 7.5 | Apr 1 | WordPress JS Help Desk plugin <= 2.9.1 - Arbitrary File Download vulnerability Affected: through 2.9.1 |
| CVE-2025-30880 | 7.5 | Apr 1 | WordPress JS Help Desk plugin <= 2.9.2 - Broken Access Control vulnerability Affected: through 2.9.2 |
| CVE-2026-32535 | 6.5 | Mar 25 | WordPress JS Help Desk plugin <= 3.0.3 - Insecure Direct Object References (IDOR) vulnerability Affected: through <= 3.0.3 |
| CVE-2022-46840 | 5.4 | Dec 13 | WordPress JS Help Desk plugin <= 2.7.1 - Broken Access Control Affected: before 2.7.2 |
| CVE-2026-57652 | 5.3 | Jun 26 | WordPress JS Help Desk plugin <= 3.1.0 - Insecure Direct Object References (IDOR) vulnerability Affected: through 3.1.0 |
| CVE-2024-51670 | 4.8 | Nov 9 | WordPress JS Help Desk plugin <= 2.8.7 - Stored Cross Site Scripting (XSS) vulnerability Affected: through 2.8.7 |
Showing 16