Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: rabilal Clear all filters
TI-2026-86167 CVE-2026-118046 · GHSA-g435-8rf2-7v92

Stored DOM-based cross-site scripting in JS Help Desk plugin

Priority LOW 28

The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'jsticket_message' parameter in all versions up to, and including, 5.0.2 due to…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00201 Published 2026-11-07 No fix listed CWE-79
TI-2026-83234 CVE-2026-104739 · GHSA-2c2g-q6hp-xc6q

Path traversal in JS Help Desk plugin enables arbitrary file deletion

Priority LOW 24

The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the setSupportCustomImage function in all versions up to,…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00787 Published 2026-10-30 No fix listed CWE-22
TI-2026-10460 CVE-2026-12153 · GHSA-hpq8-57wr-526c

Missing authorization in rabilal WP Learn Manager

Priority MEDIUM 50

The WP Learn Manager plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.8.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00673 Published 2026-07-08 No fix listed CWE-862
TI-2026-02137 CVE-2026-2511 · GHSA-x7pj-w9h3-5rv9

SQL injection in rabilal JS Help Desk – AI-Powered Support & Ticketing System

Priority LOW 39

The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to SQL Injection via the `multiformid` parameter in the `storeTickets()` function in all versions up to, and including, 3.0.4.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00316 Published 2026-03-26 No fix listed CWE-89
TI-2023-06703 CVE-2023-7337 · GHSA-q6hf-vhcp-h7c7

SQL injection in rabilal JS Help Desk – AI-Powered Support & Ticketing System

Priority MEDIUM 42

The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to SQL Injection via the 'js-support-ticket-token-tkstatus' cookie in version 2.8.2 due to an incomplete fix for CVE-2023-50839…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01427 Published 2026-03-04 No fix listed CWE-89
TI-2024-12648 CVE-2024-13607 · GHSA-pgfm-8chm-hcv4

Authorization bypass in rabilal JS Help Desk – AI-Powered Support & Ticketing System

Priority LOW 20

The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.8.8 via the 'exportusereraserequest' due to missin…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0042 Published 2025-02-04 No fix listed CWE-639
TI-2024-06569 CVE-2024-7094 · GHSA-344g-jvx4-773r

Code injection in rabilal JS Help Desk – AI-Powered Support & Ticketing System

Priority HIGH 75

The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to PHP Code Injection leading to Remote Code Execution in all versions up to, and including, 2.8.6 via the 'storeTheme' functi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.37645 Published 2024-08-13 No fix listed CWE-94