Read the docs

JS Help Desk

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

JS Help Desk records in CISA KEV

No JS Help Desk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jshelpdesk 1 record LOW

Records

10 records

TI-2023-27744 CVE-2023-50839 · GHSA-3f5j-mfg2-hxvj

WordPress JS Help Desk – Best Help Desk & Support Plugin <= 2.8.1 is vulnerable to SQL Injection

Priority MEDIUM 52

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02041 Published 2023-12-28 No fix listed CWE-89
TI-2022-23184 CVE-2022-46839 · GHSA-m3fq-v9fh-gg5p

WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.1 is vulnerable to Arbitrary File Upload

Priority MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00827 Published 2024-01-05 No fix listed CWE-434
TI-2024-28927 CVE-2024-43274 · GHSA-grx6-q36w-3gr9

WordPress JS Help Desk – The Ultimate Help Desk plugin <= 2.8.6 - Broken Access Control vulnerability

Priority MEDIUM 48

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk – Best Help Desk & Suppor…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00442 Published 2024-11-01 No fix listed CWE-862
TI-2024-20649 CVE-2024-31273 · GHSA-788w-97ww-9qj4

WordPress JS Help Desk plugin <= 2.8.3 - Broken Access Control vulnerability

Priority MEDIUM 48

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00472 Published 2024-06-09 No fix listed CWE-862
TI-2022-23183 CVE-2022-46838 · GHSA-v2q3-j5hx-299f

WordPress JS Help Desk plugin <= 2.7.1 - Unauthenticated Settings Change Vulnerability

Priority MEDIUM 47

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00732 Published 2024-12-13 No fix listed CWE-862
TI-2022-23356 CVE-2022-47151 · GHSA-xv35-3wcg-v2qf

WordPress JS Help Desk plugin <= 2.7.1 - Unauth. SQL Injection Vulnerability

Priority MEDIUM 44

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00443 Published 2024-04-17 No fix listed CWE-89
TI-2023-10754 CVE-2023-25444 · GHSA-q65p-758p-5fmq

WordPress JS Help Desk – Best Help Desk & Support Plugin plugin <= 2.7.7 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Using Malicious Files.This issue affects JS Help Desk – Best Help Desk & Support Plugin:…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00841 Published 2024-05-17 No fix listed CWE-434
TI-2023-09493 CVE-2023-23679 · GHSA-f6vx-5rmg-69j9

Authorization bypass in JS Help Desk

Priority LOW 38

Authorization Bypass Through User-Controlled Key vulnerability in JS Help Desk js-support-ticket allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk: from n/a through 2.7.7.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00472 Published 2023-06-23 No fix listed CWE-639
TI-2022-23185 CVE-2022-46840 · GHSA-jcm8-w5wv-cxc6

WordPress JS Help Desk plugin <= 2.7.1 - Broken Access Control

Priority LOW 25

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00453 Published 2024-12-13 No fix listed CWE-862
Open these records in search →