JS Help Desk – AI-Powered Support & Ticketing System vulnerabilities

Product

JS Help Desk – AI-Powered Support & Ticketing System

by rabilal · last CVE Mar 26, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 1High 3Medium 1Low 0

Severity

Exploitation

Watch

Add JS Help Desk – AI-Powered Support & Ticketing System to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-7094	9.8	38%	Aug 13	JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.6 - Unauthenticated PHP Code Injection to Remote Code Execution Affected: through 2.8.6
CVE-2026-2511	7.5	0%	Mar 26	JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.4 - Unauthenticated SQL Injection via 'multiformid' Parameter Affected: through 3.0.4
CVE-2023-7337	7.5	1%	Mar 4	JS Help Desk – AI-Powered Support & Ticketing System 2.8.2 - Unauthenticated SQL Injection via 'js-support-ticket-token-tkstatus' Cookie Affected: through 2.8.2
CVE-2024-13606	7.5	0%	Feb 13	JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory Affected: through 2.8.8
CVE-2024-13607	4.3	0%	Feb 4	JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Authenticated (Subscriber+) Insecure Direct Object Reference Affected: through 2.8.8