What’s Vulnerable › Products

JoomSky JS Help Desk vulnerabilities

16 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.

Check whether your JoomSky JS Help Desk version is affected

Latest JoomSky JS Help Desk vulnerabilities

• CVE-2026-57652 — WordPress JS Help Desk plugin <= 3.1.0 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3)
• CVE-2026-32535 — WordPress JS Help Desk plugin <= 3.0.3 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5)
• CVE-2026-32534 — WordPress JS Help Desk plugin <= 3.0.3 - SQL Injection vulnerability (CVSS 8.5)
• CVE-2026-24959 — WordPress JS Help Desk plugin <= 3.0.1 - SQL Injection vulnerability (CVSS 8.5)
• CVE-2025-30901 — WordPress JS Help Desk plugin <= 2.9.2 - Local File Inclusion vulnerability (CVSS 8.1)
• CVE-2025-30886 — WordPress JS Help Desk plugin <= 2.9.2 - SQL Injection vulnerability (CVSS 10.0)
• CVE-2025-30882 — WordPress JS Help Desk plugin <= 2.9.1 - Arbitrary File Download vulnerability (CVSS 7.5)
• CVE-2025-30880 — WordPress JS Help Desk plugin <= 2.9.2 - Broken Access Control vulnerability (CVSS 7.5)
• CVE-2025-30878 — WordPress JS Help Desk plugin <= 2.9.2 - Arbitrary File Deletion vulnerability (CVSS 9.1)
• CVE-2022-46840 — WordPress JS Help Desk plugin <= 2.7.1 - Broken Access Control (CVSS 5.4)
• CVE-2022-46838 — WordPress JS Help Desk plugin <= 2.7.1 - Unauthenticated Settings Change Vulnerability (CVSS 9.1)
• CVE-2024-51670 — WordPress JS Help Desk plugin <= 2.8.7 - Stored Cross Site Scripting (XSS) vulnerability (CVSS 4.8)
• CVE-2024-43274 — WordPress JS Help Desk – The Ultimate Help Desk plugin <= 2.8.6 - Broken Access Control vulnerability (CVSS 9.8)
• CVE-2023-25444 — WordPress JS Help Desk – Best Help Desk & Support Plugin plugin <= 2.7.7 - Arbitrary File Upload vulnerability (CVSS 9.1)
• CVE-2022-47151 — WordPress JS Help Desk plugin <= 2.7.1 - Unauth. SQL Injection Vulnerability (CVSS 8.6)
• CVE-2018-21002 — (CVSS 8.8)