Read the docs

JoomSky

Records42All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high18CVSS 7.0–8.9

Exploited now

JoomSky records in CISA KEV

No JoomSky vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Js Help Desk 12 records MEDIUM Js Job Manager 11 records MEDIUM Js Jobs 6 records MEDIUM Js Autoz 1 record MEDIUM Js Support Ticket 1 record MEDIUM

Records

12 records in Js Help Desk · all components

TI-2024-28927 CVE-2024-43274 · GHSA-grx6-q36w-3gr9

WordPress JS Help Desk – The Ultimate Help Desk plugin <= 2.8.6 - Broken Access Control vulnerability

Priority MEDIUM 48

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk – Best Help Desk & Suppor…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00442 Published 2024-11-01 No fix listed CWE-862
TI-2022-23183 CVE-2022-46838 · GHSA-v2q3-j5hx-299f

WordPress JS Help Desk plugin <= 2.7.1 - Unauthenticated Settings Change Vulnerability

Priority MEDIUM 47

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00732 Published 2024-12-13 No fix listed CWE-862
TI-2025-22156 CVE-2025-30886 · GHSA-964p-mw8f-wq7h

WordPress JS Help Desk plugin <= 2.9.2 - SQL Injection vulnerability

Priority MEDIUM 44

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help Desk js-support-ticket allows SQL Injection.This issue affects JS Help Desk: from n/a through <= 2.9.2…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00541 Published 2025-04-01 No fix listed CWE-89
TI-2022-23356 CVE-2022-47151 · GHSA-xv35-3wcg-v2qf

WordPress JS Help Desk plugin <= 2.7.1 - Unauth. SQL Injection Vulnerability

Priority MEDIUM 44

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00443 Published 2024-04-17 No fix listed CWE-89
TI-2023-10754 CVE-2023-25444 · GHSA-q65p-758p-5fmq

WordPress JS Help Desk – Best Help Desk & Support Plugin plugin <= 2.7.7 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Using Malicious Files.This issue affects JS Help Desk – Best Help Desk & Support Plugin:…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00841 Published 2024-05-17 No fix listed CWE-434
TI-2025-22148 CVE-2025-30878 · GHSA-v8gm-mmxg-v36w

WordPress JS Help Desk plugin <= 2.9.2 - Arbitrary File Deletion vulnerability

Priority MEDIUM 40

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk js-support-ticket allows Path Traversal.This issue affects JS Help Desk: from n/a through <= 2.9.2.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00645 Published 2025-04-01 No fix listed CWE-22
TI-2025-22171 CVE-2025-30901 · GHSA-m957-8r27-px6j

WordPress JS Help Desk plugin <= 2.9.2 - Local File Inclusion vulnerability

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Help Desk js-support-ticket allows PHP Local File Inclusion.This issue affects JS Help D…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00885 Published 2025-04-01 No fix listed CWE-98
TI-2025-22152 CVE-2025-30882 · GHSA-2mc3-h3h3-g4xq

WordPress JS Help Desk plugin <= 2.9.1 - Arbitrary File Download vulnerability

Priority LOW 34

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk js-support-ticket allows Path Traversal.This issue affects JS Help Desk: from n/a through <= 2.9.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00612 Published 2025-04-01 No fix listed CWE-22
TI-2025-22150 CVE-2025-30880 · GHSA-78vh-6phv-92x4

WordPress JS Help Desk plugin <= 2.9.2 - Broken Access Control vulnerability

Priority LOW 33

Missing Authorization vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through <= 2.9.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00506 Published 2025-04-01 No fix listed CWE-862
TI-2024-34584 CVE-2024-51670 · GHSA-4998-4cwm-v6xh

WordPress JS Help Desk plugin <= 2.8.7 - Stored Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Help Desk js-support-ticket allows Stored XSS.This issue affects JS Help Desk: from n/a through <= 2.8.7.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00276 Published 2024-11-09 No fix listed CWE-79
TI-2022-23185 CVE-2022-46840 · GHSA-jcm8-w5wv-cxc6

WordPress JS Help Desk plugin <= 2.7.1 - Broken Access Control

Priority LOW 25

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00453 Published 2024-12-13 No fix listed CWE-862
Open these records in search →