wiselyhub records
6 published records for vendor wiselyhub.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 83.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-862 Missing Authorization1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
50Plan | CVE-2024-7094Proof of concept | JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.6 - Unauthenticated PHP Code Injection to Remote Code Executionrabilal · js help desk – ai-powered support & ticketing system · CWE-94 | Critical9.8 | — | 37.6% | Aug 12, 2024 |
40Plan | CVE-2023-50839Proof of concept | WordPress JS Help Desk – Best Help Desk & Support Plugin <= 2.8.1 is vulnerable to SQL Injectionwiselyhub · js help desk · CWE-89 | Critical9.8 | — | 2.0% | Dec 28, 2023 |
39Monitor | CVE-2022-46839No exploit | WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.1 is vulnerable to Arbitrary File Uploadwiselyhub · js help desk · CWE-434 | Critical9.8 | — | 0.8% | Jan 5, 2024 |
39Monitor | CVE-2024-31273No exploit | WordPress JS Help Desk plugin <= 2.8.3 - Broken Access Control vulnerabilitywiselyhub · js help desk · CWE-862 | Critical9.8 | — | 0.4% | Jun 9, 2024 |
35Monitor | CVE-2022-46842No exploit | WordPress JS Help Desk plugin <= 2.7.1 is vulnerable to Cross Site Request Forgery (CSRF)wiselyhub · js help desk · CWE-352 | High8.8 | — | 0.2% | Feb 2, 2023 |
30Monitor | CVE-2024-13606No exploit | JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directorywiselyhub · js help desk · CWE-200 | High7.5 | — | 0.4% | Feb 13, 2025 |
- CVE-2024-709450Plan
JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.6 - Unauthenticated PHP Code Injection to Remote Code Execution
CriticalCVSS 9.8Proof of conceptEPSS 37%rabilal · js help desk – ai-powered support & ticketing systemAug 12, 2024
- CVE-2023-5083940Plan
WordPress JS Help Desk – Best Help Desk & Support Plugin <= 2.8.1 is vulnerable to SQL Injection
CriticalCVSS 9.8Proof of conceptEPSS 2%wiselyhub · js help deskDec 28, 2023
- CVE-2022-4683939Monitor
WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.1 is vulnerable to Arbitrary File Upload
CriticalCVSS 9.8No exploitEPSS 0%wiselyhub · js help deskJan 5, 2024
- CVE-2024-3127339Monitor
WordPress JS Help Desk plugin <= 2.8.3 - Broken Access Control vulnerability
CriticalCVSS 9.8No exploitEPSS 0%wiselyhub · js help deskJun 9, 2024
- CVE-2022-4684235Monitor
WordPress JS Help Desk plugin <= 2.7.1 is vulnerable to Cross Site Request Forgery (CSRF)
HighCVSS 8.8No exploitEPSS 0%wiselyhub · js help deskFeb 2, 2023
- CVE-2024-1360630Monitor
JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
HighCVSS 7.5No exploitEPSS 0%wiselyhub · js help deskFeb 13, 2025