1260 matches found
CVE-2025-30878
CVE-2025-30878 affects the WordPress plugin JS Help Desk (
CVE-2025-30882
The CVE-2025-30882 entry concerns JS Help Desk for WordPress with an Unauthenticated Path Traversal that allows Arbitrary File Download in versions up to 2.9.1. The vulnerability has a high potential impact (CVSS v3.1: 7.5, Attack Vector Network, Privileges None, User Interaction None) with Confi...
WordPress plugin JS Help Desk 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...
WordPress plugin JS Help Desk SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...
PT-2025-14065 · Joomsky · Joomsky Js Help Desk
Name of the Vulnerable Software and Affected Versions: JoomSky JS Help Desk versions 2.9.2 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusio...
PT-2025-14061 · Joomsky · Joomsky Js Help Desk
Name of the Vulnerable Software and Affected Versions: JoomSky JS Help Desk versions n/a through 2.9.2 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal vulnerability. This vulnerability allows unauthorized access...
WordPress plugin JS Help Desk 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2025-14062
Name of the Vulnerable Software and Affected Versions JoomSky JS Help Desk versions n/a through 2.9.2 Description The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations For versions n/a through...
WordPress plugin JS Help Desk 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...
PT-2025-14063 · Joomsky · Joomsky Js Help Desk
Name of the Vulnerable Software and Affected Versions: JoomSky JS Help Desk versions n/a through 2.9.1 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows for Path Traversal in JoomSky JS Help Desk...
WordPress plugin JS Help Desk 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2025-14064 · Joomsky · Joomsky Js Help Desk
Name of the Vulnerable Software and Affected Versions: JoomSky JS Help Desk versions 2.9.2 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows unauthorized SQL commands to be execute...
WordPress JS Help Desk plugin <= 2.9.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by LVT-tholv2k in WordPress Plugin JS Help Desk versions = 2.9.2...
WordPress JS Help Desk plugin <= 2.9.2 - SQL Injection vulnerability
SQL Injection vulnerability discovered by LVT-tholv2k in WordPress Plugin JS Help Desk versions = 2.9.2...
WordPress JS Help Desk plugin <= 2.9.1 - Arbitrary File Download vulnerability
Arbitrary File Download vulnerability discovered by LVT-tholv2k in WordPress Plugin JS Help Desk versions = 2.9.1...
WordPress JS Help Desk plugin <= 2.9.2 - Arbitrary File Deletion vulnerability
Arbitrary File Deletion vulnerability discovered by LVT-tholv2k in WordPress Plugin JS Help Desk versions = 2.9.2...
WordPress JS Help Desk plugin <= 2.9.2 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin JS Help Desk versions = 2.9.2...
SolarWinds Web Help Desk < 12.8.5 Information Disclosure
The version of Solarwinds Web Help Desk installed on the remote host is prior to 12.8.5. It is, therefore, affected by a vulnerability. SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive information from the software. Note that...
CVE-2024-28989
SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive information from the software...
CVE-2024-13606
The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.8 via the 'jssupportticketdata' directory. This makes it possible for unauthenticated attackers to extract sensitive data store...