rabilal JS Help Desk – AI-Powered Support & Ticketing System vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Latest rabilal JS Help Desk – AI-Powered Support & Ticketing System vulnerabilities

CVE-2026-2511 — JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.4 - Unauthenticated SQL Injection via 'multiformid' Parameter (CVSS 7.5)
CVE-2023-7337 — JS Help Desk – AI-Powered Support & Ticketing System 2.8.2 - Unauthenticated SQL Injection via 'js-support-ticket-token-tkstatus' Cookie (CVSS 7.5)
CVE-2024-13606 — JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory (CVSS 7.5)
CVE-2024-13607 — JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Authenticated (Subscriber+) Insecure Direct Object Reference (CVSS 4.3)
CVE-2024-7094 — JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.6 - Unauthenticated PHP Code Injection to Remote Code Execution (CVSS 9.8)
CVE-2024-31273 — WordPress JS Help Desk plugin <= 2.8.3 - Broken Access Control vulnerability (CVSS 9.8)
CVE-2022-46839 — WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.1 is vulnerable to Arbitrary File Upload (CVSS 9.8)
CVE-2023-50839 — WordPress JS Help Desk – Best Help Desk & Support Plugin <= 2.8.1 is vulnerable to SQL Injection (CVSS 9.8)
CVE-2022-46842 — WordPress JS Help Desk plugin <= 2.7.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)