PT-2023-16692 · WordPress · The Help Desk Wp

Name of the Vulnerable Software and Affected Versions: The Help Desk WP WordPress plugin version 1.2.0 and earlier Description: The issue is related to the lack of sanitization and escaping of certain parameters, which could allow users with a role as low as Editor to perform Cross-Site Scripting...

CVE-2022-46842

The CVE-2022-46842 entry covers a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress JS Help Desk plugin, versioned at

WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.1 is vulnerable to Settings Change

Software JS Help Desk – Best Help Desk & Support Plugin Type Plugin Vulnerable versions = 2.7.1 Fixed in 2.7.2 OWASP Top 10 A2: Broken Authentication Classification Settings Change CVE CVE-2022-46838 Patch priority High CVSS severity High 9.1 Developer Claim ownership PSID f5722521e19a Credits...