JS Help Desk – AI-Powered Support & Ticketing System

Уязвимости

• CVE-2025-30886без авторизации≤ 2.9.2

  WordPress JS Help Desk plugin <= 2.9.2 - SQL Injection vulnerability

  Критич. 10.0

• CVE-2024-43274без авторизации≤ 2.8.6

  WordPress JS Help Desk – The Ultimate Help Desk plugin <= 2.8.6 - Broken Access Control vulnerability

  Критич. 9.8

• CVE-2024-7094без авторизации≤ 2.8.6

  JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.6 - Unauthenticated PHP Code Injection to Remote Code Execution

  Критич. 9.8

• CVE-2024-31273без авторизации≤ 2.8.3

  WordPress JS Help Desk plugin <= 2.8.3 - Broken Access Control vulnerability

  Критич. 9.8

• CVE-2022-46839без авторизации≤ 2.7.1

  WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.1 is vulnerable to Arbitrary File Upload

  Критич. 9.8

• CVE-2023-50839без авторизации≤ 2.8.1

  WordPress JS Help Desk – Best Help Desk & Support Plugin <= 2.8.1 is vulnerable to SQL Injection

  Критич. 9.8

• CVE-2026-48886без авторизации≤ 3.0.9

  WordPress JS Help Desk plugin <= 3.0.9 - SQL Injection vulnerability

  Критич. 9.3

• CVE-2025-30878без авторизации≤ 2.9.2

  WordPress JS Help Desk plugin <= 2.9.2 - Arbitrary File Deletion vulnerability

  Критич. 9.1

• CVE-2022-46838без авторизации≤ 2.7.1

  WordPress JS Help Desk plugin <= 2.7.1 - Unauthenticated Settings Change Vulnerability

  Критич. 9.1

• CVE-2023-25444высокие права≤ 2.7.7

  WordPress JS Help Desk – Best Help Desk & Support Plugin plugin <= 2.7.7 - Arbitrary File Upload vulnerability

  Критич. 9.1

• CVE-2022-46842без авторизации · нужен клик≤ 2.7.1

  WordPress JS Help Desk plugin <= 2.7.1 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2018-21002без авторизации · нужен клик

  The js-support-ticket plugin before 2.0.6 for WordPress has CSRF.

  Высокий 8.8

• CVE-2023-23679нужен вход≤ 2.7.7

  WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.7 is vulnerable to Insecure Direct Object References (IDOR)

  Высокий 8.8

• CVE-2022-47151без авторизации≤ 2.7.1

  WordPress JS Help Desk plugin <= 2.7.1 - Unauth. SQL Injection Vulnerability

  Высокий 8.6

• CVE-2026-32534нужен вход≤ <= 3.0.3

  WordPress JS Help Desk plugin <= 3.0.3 - SQL Injection vulnerability

  Высокий 8.5

• CVE-2026-24959нужен вход≤ 3.0.1

  WordPress JS Help Desk plugin <= 3.0.1 - SQL Injection vulnerability

  Высокий 8.5

• CVE-2025-30901без авторизации≤ 2.9.2

  WordPress JS Help Desk plugin <= 2.9.2 - Local File Inclusion vulnerability

  Высокий 8.1

• CVE-2026-56054подписчик+≤ 3.1.1

  WordPress JS Help Desk plugin <= 3.1.1 - Arbitrary File Deletion vulnerability

  Высокий 7.7

• CVE-2026-2511без авторизации≤ 3.0.4

  JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.4 - Unauthenticated SQL Injection via 'multiformid' Parameter

  Высокий 7.5

• CVE-2023-7337без авторизации≤ 2.8.2

  JS Help Desk – AI-Powered Support & Ticketing System 2.8.2 - Unauthenticated SQL Injection via 'js-support-ticket-token-tkstatus' Cookie

  Высокий 7.5

• CVE-2025-30882без авторизации≤ 2.9.1

  WordPress JS Help Desk plugin <= 2.9.1 - Arbitrary File Download vulnerability

  Высокий 7.5

• CVE-2025-30880без авторизации≤ 2.9.2

  WordPress JS Help Desk plugin <= 2.9.2 - Broken Access Control vulnerability

  Высокий 7.5

• CVE-2024-13606без авторизации≤ 2.8.8

  JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

  Высокий 7.5

• CVE-2026-48887без авторизации≤ 3.0.9

  WordPress JS Help Desk plugin <= 3.0.9 - Broken Access Control vulnerability

  Средний 6.5

• CVE-2026-32535нужен вход≤ <= 3.0.3

  WordPress JS Help Desk plugin <= 3.0.3 - Insecure Direct Object References (IDOR) vulnerability

  Средний 6.5

• CVE-2022-46840нужен вход≤ 2.7.1

  WordPress JS Help Desk plugin <= 2.7.1 - Broken Access Control

  Средний 5.4

• CVE-2026-57652без авторизации≤ 3.1.0

  WordPress JS Help Desk plugin <= 3.1.0 - Insecure Direct Object References (IDOR) vulnerability

  Средний 5.3

• CVE-2024-51670высокие права≤ 2.8.7

  WordPress JS Help Desk plugin <= 2.8.7 - Stored Cross Site Scripting (XSS) vulnerability

  Средний 4.8

• CVE-2024-13607подписчик+≤ 2.8.8

  JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Authenticated (Subscriber+) Insecure Direct Object Reference

  Средний 4.3