← WordPress Vulnerabilities
WordPress security by component

JS Help Desk

JS Help Desk is a WordPress component with 20 published CVE records in this archive. The latest tracked vulnerability was published Jun 26, 2026; the highest CVE/CNA score is 10.

Plugin slug: js-support-ticket

CVE-2026-57652: JS Help Desk: A security weakness

JS Help Desk is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 3.1.0.

PublishedJun 26, 2026
Known safe version3.1.1
Safe version
Jun 26, 2026 CVE-2026-57652
JS Help Desk: A security weakness
JS Help Desk is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 3.1.0.
3.1.1
CVE5.3
NVDPending
Jun 25, 2026 CVE-2026-56054
JS Help Desk: Arbitrary file deletion
JS Help Desk is affected by arbitrary file deletion. Exposure depends on how the affected operation is made reachable by the site. A successful request can remove files outside the intended scope and may make the site unavailable. The published affected range is n/a through 3.1.1.
3.1.2
CVE7.7
NVDPending
Jun 15, 2026 CVE-2026-48887
JS Help Desk: A security weakness
JS Help Desk is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 3.0.9.
3.1.0
CVE6.5
NVDPending
Jun 15, 2026 CVE-2026-48886
JS Help Desk: SQL injection
JS Help Desk is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is n/a through 3.0.9.
3.1.0
CVE9.3
NVDPending
Mar 26, 2026 CVE-2026-2511
JS Help Desk – AI-Powered Support & Ticketing System: SQL injection
JS Help Desk – AI-Powered Support & Ticketing System is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 3.0.4.
> 3.0.4
CVE7.5
NVDPending
Mar 25, 2026 CVE-2026-32535
JS Help Desk: A security weakness
JS Help Desk is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through <= 3.0.3.
3.0.4
CVE6.5
NVDPending
Mar 25, 2026 CVE-2026-32534
JS Help Desk: SQL injection
JS Help Desk is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data. The published affected range is n/a through <= 3.0.3.
3.0.4
CVE8.5
NVDPending
Feb 20, 2026 CVE-2026-24959
JS Help Desk: SQL injection
JS Help Desk is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE8.5
NVDPending
Feb 13, 2025 CVE-2024-13606
JS Help Desk – The Ultimate Help Desk & Support Plugin: Sensitive information exposure
JS Help Desk – The Ultimate Help Desk & Support Plugin is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.
See mitigation notes
CVE7.5
NVDPending
Feb 04, 2025 CVE-2024-13607
JS Help Desk – The Ultimate Help Desk & Support Plugin: A security weakness
JS Help Desk – The Ultimate Help Desk & Support Plugin is affected by a security weakness. Exploitation requires an authenticated WordPress account. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVDPending
Nov 01, 2024 CVE-2024-43274
JS Help Desk – Best Help Desk & Support Plugin: A security weakness
JS Help Desk – Best Help Desk & Support Plugin is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.8
NVD9.8
Aug 13, 2024 CVE-2024-7094
JS Help Desk – The Ultimate Help Desk & Support Plugin: Code execution
JS Help Desk – The Ultimate Help Desk & Support Plugin is affected by code execution. The vulnerable path is reachable without authentication. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
See mitigation notes
CVE9.8
NVDPending
Jun 09, 2024 CVE-2024-31273
JS Help Desk – Best Help Desk & Support Plugin: A security weakness
JS Help Desk – Best Help Desk & Support Plugin is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.3
NVD9.8
May 17, 2024 CVE-2023-25444
JS Help Desk – Best Help Desk & Support Plugin: Dangerous file upload
JS Help Desk – Best Help Desk & Support Plugin is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
See mitigation notes
CVE9.1
NVDPending
Apr 17, 2024 CVE-2022-47151
JS Help Desk – Best Help Desk & Support Plugin: SQL injection
JS Help Desk – Best Help Desk & Support Plugin is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE8.6
NVDPending
Jan 05, 2024 CVE-2022-46839
JS Help Desk – Best Help Desk & Support Plugin: Dangerous file upload
JS Help Desk – Best Help Desk & Support Plugin is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
See mitigation notes
CVE10.0
NVD9.8
Dec 28, 2023 CVE-2023-50839
JS Help Desk – Best Help Desk & Support Plugin: SQL injection
JS Help Desk – Best Help Desk & Support Plugin is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE9.3
NVD9.8
Jun 23, 2023 CVE-2023-23679
JS Help Desk: A security weakness
JS Help Desk is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.6
NVD8.8
Feb 02, 2023 CVE-2022-46842
Js Support Ticket: Cross-site request forgery
Js Support Ticket is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE5.4
NVD8.8
Aug 27, 2019 CVE-2018-21002
Js Support Ticket: Cross-site request forgery
Js Support Ticket is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE8.8
NVD8.8