RA
Vendor
rabilal
6
CVEs
0
On KEV
0
New 30D
Products
JH9.8
JS Help Desk – AI-Powered Support & Ticketing System
rabilal
5 CVEs0 on KEV0 new
WL9.8
WP Learn Manager
rabilal
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-12153 | WL WP Learn Manager rabilal | 9.8 | Jul 8 | WP Learn Manager <= 1.1.8 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation and Activation via jslearnmanager_ajax AJAX Action |
| CVE-2026-2511 | JH JS Help Desk – AI-Powered Support & Ticketing System rabilal | 7.5 | Mar 26 | JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.4 - Unauthenticated SQL Injection via 'multiformid' Parameter |
| CVE-2023-7337 | JH JS Help Desk – AI-Powered Support & Ticketing System rabilal | 7.5 | Mar 4 | JS Help Desk – AI-Powered Support & Ticketing System 2.8.2 - Unauthenticated SQL Injection via 'js-support-ticket-token-tkstatus' Cookie |
| CVE-2024-13606 | JH JS Help Desk – AI-Powered Support & Ticketing System rabilal | 7.5 | Feb 13 | JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory |
| CVE-2024-13607 | JH JS Help Desk – AI-Powered Support & Ticketing System rabilal | 4.3 | Feb 4 | JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Authenticated (Subscriber+) Insecure Direct Object Reference |
| CVE-2024-7094 | JH JS Help Desk – AI-Powered Support & Ticketing System rabilal | 9.8 | Aug 13 | JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.6 - Unauthenticated PHP Code Injection to Remote Code Execution |