Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Vendor: JS Help Desk Clear all filters
TI-2022-23185 CVE-2022-46840 · GHSA-jcm8-w5wv-cxc6

WordPress JS Help Desk plugin <= 2.7.1 - Broken Access Control

Priority LOW 25

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00453 Published 2024-12-13 No fix listed CWE-862
TI-2022-23183 CVE-2022-46838 · GHSA-v2q3-j5hx-299f

WordPress JS Help Desk plugin <= 2.7.1 - Unauthenticated Settings Change Vulnerability

Priority MEDIUM 47

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00732 Published 2024-12-13 No fix listed CWE-862
TI-2024-28927 CVE-2024-43274 · GHSA-grx6-q36w-3gr9

WordPress JS Help Desk – The Ultimate Help Desk plugin <= 2.8.6 - Broken Access Control vulnerability

Priority MEDIUM 48

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk – Best Help Desk & Suppor…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00442 Published 2024-11-01 No fix listed CWE-862
TI-2024-20649 CVE-2024-31273 · GHSA-788w-97ww-9qj4

WordPress JS Help Desk plugin <= 2.8.3 - Broken Access Control vulnerability

Priority MEDIUM 48

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00472 Published 2024-06-09 No fix listed CWE-862
TI-2023-10754 CVE-2023-25444 · GHSA-q65p-758p-5fmq

WordPress JS Help Desk – Best Help Desk & Support Plugin plugin <= 2.7.7 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Using Malicious Files.This issue affects JS Help Desk – Best Help Desk & Support Plugin:…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00841 Published 2024-05-17 No fix listed CWE-434
TI-2022-23356 CVE-2022-47151 · GHSA-xv35-3wcg-v2qf

WordPress JS Help Desk plugin <= 2.7.1 - Unauth. SQL Injection Vulnerability

Priority MEDIUM 44

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00443 Published 2024-04-17 No fix listed CWE-89
TI-2022-23184 CVE-2022-46839 · GHSA-m3fq-v9fh-gg5p

WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.1 is vulnerable to Arbitrary File Upload

Priority MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00827 Published 2024-01-05 No fix listed CWE-434
TI-2023-27744 CVE-2023-50839 · GHSA-3f5j-mfg2-hxvj

WordPress JS Help Desk – Best Help Desk & Support Plugin <= 2.8.1 is vulnerable to SQL Injection

Priority MEDIUM 52

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02041 Published 2023-12-28 No fix listed CWE-89
TI-2023-09493 CVE-2023-23679 · GHSA-f6vx-5rmg-69j9

Authorization bypass in JS Help Desk

Priority LOW 38

Authorization Bypass Through User-Controlled Key vulnerability in JS Help Desk js-support-ticket allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk: from n/a through 2.7.7.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00472 Published 2023-06-23 No fix listed CWE-639