Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

16 records

Vendor: Ahmad Clear all filters
TI-2026-86523 CVE-2026-119513 · GHSA-7hcq-6mv2-388w

Broken access control in WordPress JS Help Desk plugin

Priority LOW 30

Missing Authorization vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through 5.0.3.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00234 Published 2026-11-07 No fix listed CWE-862
TI-2026-82382 CVE-2026-22386 · GHSA-qvq4-6wrx-6f2f

Missing authorization in WP Job Portal WordPress plugin

Priority LOW 19

Missing Authorization vulnerability in Ahmad WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Portal: from n/a through 2.7.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00221 Published 2026-10-29 No fix listed CWE-862
TI-2026-79232 CVE-2026-112218 · GHSA-m656-9wfv-rqhp

WordPress Majestic Support plugin Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through 1.2.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00242 Published 2026-10-22 No fix listed CWE-862
TI-2026-67632 CVE-2026-103079 · GHSA-w2mg-rw6r-fxx8

Authorization bypass in WordPress JS Help Desk plugin

Priority LOW 24

Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a thr…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00182 Published 2026-10-05 No fix listed CWE-639
TI-2026-67631 CVE-2026-103078 · GHSA-6f4g-xj5p-3c9x

Authorization bypass in JS Help Desk WordPress plugin

Priority LOW 19

Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a thr…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00214 Published 2026-10-05 No fix listed CWE-639
TI-2026-65378 CVE-2026-102382 · GHSA-8w45-xgjr-c8j7

WordPress Majestic Support plugin <= 1.2.0 - Insecure Direct Object References (IDOR) vulnerability

Priority LOW 19

Authorization Bypass Through User-Controlled Key vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0017 Published 2026-10-01 No fix listed CWE-639
TI-2026-65377 CVE-2026-102381 · GHSA-hm42-pqqp-m452

WordPress Majestic Support plugin <= 1.2.0 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through 1.2.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00171 Published 2026-10-01 No fix listed CWE-862
TI-2026-30943 CVE-2026-42684 · GHSA-6m39-555m-v725

WordPress WP Job Portal plugin <= 2.5.1 - SQL Injection vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ahmad WP Job Portal allows Blind SQL Injection.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00299 Published 2026-06-02 No fix listed CWE-89