JS Help Desk – AI-Powered Support & Ticketing System

Güvenlik açıkları

• CVE-2025-30886kimlik doğrulamasız≤ 2.9.2

  WordPress JS Help Desk plugin <= 2.9.2 - SQL Injection vulnerability

  Kritik 10.0

• CVE-2024-43274kimlik doğrulamasız≤ 2.8.6

  WordPress JS Help Desk – The Ultimate Help Desk plugin <= 2.8.6 - Broken Access Control vulnerability

  Kritik 9.8

• CVE-2024-7094kimlik doğrulamasız≤ 2.8.6

  JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.6 - Unauthenticated PHP Code Injection to Remote Code Execution

  Kritik 9.8

• CVE-2024-31273kimlik doğrulamasız≤ 2.8.3

  WordPress JS Help Desk plugin <= 2.8.3 - Broken Access Control vulnerability

  Kritik 9.8

• CVE-2022-46839kimlik doğrulamasız≤ 2.7.1

  WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.1 is vulnerable to Arbitrary File Upload

  Kritik 9.8

• CVE-2023-50839kimlik doğrulamasız≤ 2.8.1

  WordPress JS Help Desk – Best Help Desk & Support Plugin <= 2.8.1 is vulnerable to SQL Injection

  Kritik 9.8

• CVE-2026-48886kimlik doğrulamasız≤ 3.0.9

  WordPress JS Help Desk plugin <= 3.0.9 - SQL Injection vulnerability

  Kritik 9.3

• CVE-2025-30878kimlik doğrulamasız≤ 2.9.2

  WordPress JS Help Desk plugin <= 2.9.2 - Arbitrary File Deletion vulnerability

  Kritik 9.1

• CVE-2022-46838kimlik doğrulamasız≤ 2.7.1

  WordPress JS Help Desk plugin <= 2.7.1 - Unauthenticated Settings Change Vulnerability

  Kritik 9.1

• CVE-2023-25444yüksek yetki≤ 2.7.7

  WordPress JS Help Desk – Best Help Desk & Support Plugin plugin <= 2.7.7 - Arbitrary File Upload vulnerability

  Kritik 9.1

• CVE-2022-46842kimlik doğrulamasız · tıklama gerekir≤ 2.7.1

  WordPress JS Help Desk plugin <= 2.7.1 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2018-21002kimlik doğrulamasız · tıklama gerekir

  The js-support-ticket plugin before 2.0.6 for WordPress has CSRF.

  Yüksek 8.8

• CVE-2023-23679giriş gerekir≤ 2.7.7

  WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.7 is vulnerable to Insecure Direct Object References (IDOR)

  Yüksek 8.8

• CVE-2022-47151kimlik doğrulamasız≤ 2.7.1

  WordPress JS Help Desk plugin <= 2.7.1 - Unauth. SQL Injection Vulnerability

  Yüksek 8.6

• CVE-2026-32534giriş gerekir≤ <= 3.0.3

  WordPress JS Help Desk plugin <= 3.0.3 - SQL Injection vulnerability

  Yüksek 8.5

• CVE-2026-24959giriş gerekir≤ 3.0.1

  WordPress JS Help Desk plugin <= 3.0.1 - SQL Injection vulnerability

  Yüksek 8.5

• CVE-2025-30901kimlik doğrulamasız≤ 2.9.2

  WordPress JS Help Desk plugin <= 2.9.2 - Local File Inclusion vulnerability

  Yüksek 8.1

• CVE-2026-56054abone+≤ 3.1.1

  WordPress JS Help Desk plugin <= 3.1.1 - Arbitrary File Deletion vulnerability

  Yüksek 7.7

• CVE-2026-2511kimlik doğrulamasız≤ 3.0.4

  JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.4 - Unauthenticated SQL Injection via 'multiformid' Parameter

  Yüksek 7.5

• CVE-2023-7337kimlik doğrulamasız≤ 2.8.2

  JS Help Desk – AI-Powered Support & Ticketing System 2.8.2 - Unauthenticated SQL Injection via 'js-support-ticket-token-tkstatus' Cookie

  Yüksek 7.5

• CVE-2025-30882kimlik doğrulamasız≤ 2.9.1

  WordPress JS Help Desk plugin <= 2.9.1 - Arbitrary File Download vulnerability

  Yüksek 7.5

• CVE-2025-30880kimlik doğrulamasız≤ 2.9.2

  WordPress JS Help Desk plugin <= 2.9.2 - Broken Access Control vulnerability

  Yüksek 7.5

• CVE-2024-13606kimlik doğrulamasız≤ 2.8.8

  JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

  Yüksek 7.5

• CVE-2026-48887kimlik doğrulamasız≤ 3.0.9

  WordPress JS Help Desk plugin <= 3.0.9 - Broken Access Control vulnerability

  Orta 6.5

• CVE-2026-32535giriş gerekir≤ <= 3.0.3

  WordPress JS Help Desk plugin <= 3.0.3 - Insecure Direct Object References (IDOR) vulnerability

  Orta 6.5

• CVE-2022-46840giriş gerekir≤ 2.7.1

  WordPress JS Help Desk plugin <= 2.7.1 - Broken Access Control

  Orta 5.4

• CVE-2026-57652kimlik doğrulamasız≤ 3.1.0

  WordPress JS Help Desk plugin <= 3.1.0 - Insecure Direct Object References (IDOR) vulnerability

  Orta 5.3

• CVE-2024-51670yüksek yetki≤ 2.8.7

  WordPress JS Help Desk plugin <= 2.8.7 - Stored Cross Site Scripting (XSS) vulnerability

  Orta 4.8

• CVE-2024-13607abone+≤ 2.8.8

  JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Authenticated (Subscriber+) Insecure Direct Object Reference

  Orta 4.3