Lucene search
K

25 matches found

Vulnrichment
Vulnrichment
added 2026/03/26 1:26 p.m.0 views

CVE-2026-2511 JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.4 - Unauthenticated SQL Injection via 'multiformid' Parameter

The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to SQL Injection via the multiformid parameter in the storeTickets function in all versions up to, and including, 3.0.4. This is due to the user-supplied multiformid value being passed to escsql without...

7.5CVSS5.8AI score0.00112EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/03/25 4:15 p.m.1 views

CVE-2026-32534 WordPress JS Help Desk plugin <= 3.0.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in JoomSky JS Help Desk js-support-ticket allows Blind SQL Injection.This issue affects JS Help Desk: from n/a through = 3.0.3...

8.5CVSS5.9AI score0.00044EPSS
Exploits0References1
CVE
CVE
added 2026/03/25 4:15 p.m.6 views

CVE-2026-32534

CVE-2026-32534 describes an SQL Injection issue in the WordPress plugin “JS Help Desk” (js-support-ticket). The connected documentation confirms an authenticated SQL injection vulnerability in this plugin, caused by improper neutralization of SQL elements, affecting versions up to and including 3...

8.5CVSS5.9AI score0.00044EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/03/23 12:13 p.m.4 views

WordPress JS Help Desk plugin <= 3.0.3 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Bonds in WordPress Plugin JS Help Desk versions = 3.0.3...

6.5CVSS5.8AI score0.00045EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/02/21 7:29 p.m.1 views

CVE-2026-24959

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in JoomSky JS Help Desk js-support-ticket allows Blind SQL Injection.This issue affects JS Help Desk: from n/a through = 3.0.1...

8.5CVSS5.8AI score0.00044EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/20 3:47 p.m.4 views

CVE-2026-24959 WordPress JS Help Desk plugin <= 3.0.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in JoomSky JS Help Desk js-support-ticket allows Blind SQL Injection.This issue affects JS Help Desk: from n/a through = 3.0.1...

8.5CVSS5.7AI score0.00044EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/02/11 12:46 p.m.1 views

WordPress JS Help Desk plugin <= 3.0.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Bonds in WordPress Plugin JS Help Desk versions = 3.0.1...

8.5CVSS6AI score0.00044EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-45472

Malicious code in bioql PyPI...

5.9CVSS6.5AI score0.00158EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.1 views

WordPress plugin JS Help Desk 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

7.5CVSS8.5AI score0.00359EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.1 views

WordPress plugin JS Help Desk 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

8.6CVSS8.4AI score0.00262EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/02/13 12:0 a.m.2 views

WordPress plugin JS Help Desk 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. An information disclosure vulnerabili...

7.5CVSS7.9AI score0.00286EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/02/12 10:16 p.m.2 views

WordPress JS Help Desk plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory vulnerability

Unauthenticated Sensitive Information Exposure Through Unprotected Directory vulnerability discovered by Tim Coen in WordPress Plugin JS Help Desk versions = 2.8.8...

7.5CVSS7AI score0.00286EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/02/04 12:0 a.m.1 views

WordPress plugin JS Help Desk 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS8.8AI score0.00064EPSS
Exploits0References3
OSV
OSV
added 2024/12/13 3:15 p.m.0 views

CVE-2022-46838

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1...

9.1CVSS5.8AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/12/13 12:0 a.m.2 views

PT-2024-11741 · WordPress · Js Help Desk – Best Help Desk & Support Plugin

Name of the Vulnerable Software and Affected Versions: JS Help Desk – Best Help Desk & Support Plugin versions prior to 2.7.1 Description: The issue affects the JS Help Desk – Best Help Desk & Support Plugin, allowing exploitation of incorrectly configured access control security levels due to a...

9.1CVSS7.3AI score0.00386EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2024/12/13 12:0 a.m.1 views

PT-2024-11743 · WordPress · Js Help Desk

Name of the Vulnerable Software and Affected Versions: JS Help Desk – Best Help Desk & Support Plugin versions n/a through 2.7.1 Description: The issue affects the JS Help Desk plugin, allowing exploitation of incorrectly configured access control security levels due to a missing authorization...

5.4CVSS7.1AI score0.00161EPSS
Exploits0References8
OSV
OSV
added 2024/11/01 3:15 p.m.1 views

CVE-2024-43274

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.6...

9.8CVSS5.8AI score0.00261EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/01 12:0 a.m.1 views

WordPress plugin JS Help Desk 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.8CVSS6.6AI score0.00261EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/08/12 3:32 p.m.1 views

WordPress JS Help Desk plugin <= 2.8.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Fariq Fadillah Gusti Insani Patchstack Alliance in WordPress Plugin JS Help Desk versions = 2.8.6...

9.8CVSS7AI score0.00261EPSS
Exploits0Affected Software1
OSV
OSV
added 2024/06/09 12:15 p.m.1 views

CVE-2024-31273

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.3...

9.8CVSS5.8AI score0.0029EPSS
Exploits0References1
Rows per page
Query Builder