Plugin icon

JS Help Desk – AI-Powered Support & Ticketing System

js-support-ticket

Vulnerabilities:

19

Last Updated:

May 20, 2026

Active Installs:

8000

Published
Title
Fixed in
CVSS
Published
2026-03-25
Title
JS Help Desk – AI-Powered Support & Ticketing System < 3.0.5 - Unauthenticated SQL Injection via 'multiformid' Parameter
Fixed in
Fixed in 3.0.5
CVSS
7.5 (high)
Published
2026-03-23
Title
JS Help Desk – AI-Powered Support & Ticketing System < 3.0.4 - Authenticated (Subscriber+) Insecure Direct Object Reference
Fixed in
Fixed in 3.0.4
CVSS
4.3 (medium)
Published
2026-03-20
Title
JS Help Desk – AI-Powered Support & Ticketing System < 3.0.4 - Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 3.0.4
CVSS
6.5 (medium)
Published
2026-03-03
Title
JS Help Desk < 2.8.3 - Unauthenticated SQL Injection via 'js-support-ticket-token-tkstatus' Cookie
Fixed in
Fixed in 2.8.3
CVSS
7.5 (high)
Published
2026-02-11
Title
JS Help Desk < 3.0.2 - Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 3.0.2
CVSS
6.5 (medium)
Published
2025-03-27
Title
JS Help Desk < 2.9.3 - Unauthenticated SQL Injection
Fixed in
Fixed in 2.9.3
CVSS
7.5 (high)
Published
2025-03-27
Title
JS Help Desk < 2.9.3 - Unauthenticated Local File Inclusion
Fixed in
Fixed in 2.9.3
CVSS
9.8 (critical)
Published
2025-03-27
Title
JS Help Desk < 2.9.3 - Unauthenticated Arbitrary File Deletion
Fixed in
Fixed in 2.9.3
CVSS
9.1 (critical)
Published
2025-03-27
Title
JS Help Desk < 2.9.3 - Missing Authorization
Fixed in
Fixed in 2.9.3
CVSS
5.3 (medium)
Published
2025-03-27
Title
JS Help Desk < 2.9.2 - Unauthenticated Arbitrary File Download
Fixed in
Fixed in 2.9.2
CVSS
7.5 (high)
Published
2025-02-12
Title
JS Help Desk – The Ultimate Help Desk & Support Plugin < 2.8.9 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Fixed in
Fixed in 2.8.9
CVSS
7.5 (high)
Published
2025-02-03
Title
JS Help Desk – The Ultimate Help Desk & Support Plugin < 2.8.9 - Authenticated (Subscriber+) Insecure Direct Object Reference
Fixed in
Fixed in 2.8.9
CVSS
4.3 (medium)
Published
2024-11-01
Title
JS Help Desk – Best Help Desk & Support Plugin < 2.8.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.8.8
CVSS
4.4 (medium)
Published
2024-08-12
Title
JS Help Desk – The Ultimate Help Desk & Support Plugin < 2.8.7 - Unauthenticated PHP Code Injection to Remote Code Execution
Fixed in
Fixed in 2.8.7
CVSS
9.8 (critical)
Published
2024-04-05
Title
JS Help Desk – Best Help Desk & Support Plugin < 2.8.4 - Missing Authorization
Fixed in
Fixed in 2.8.4
CVSS
5.3 (medium)
Published
2023-12-21
Title
JS Help Desk < 2.8.2 - Unauthenticated SQL Injection via email and trackingid
Fixed in
Fixed in 2.8.2
CVSS
9.8 (critical)
Published
2023-06-23
Title
JS Help Desk - Best Help Desk & Support < 2.7.8 - Subscriber+ Ticket Manipulation via IDOR
Fixed in
Fixed in 2.7.8
CVSS
4.6 (medium)
Published
2023-01-27
Title
JS Help Desk < 2.7.2 - CSRF
Fixed in
Fixed in 2.7.2
CVSS
5.4 (medium)
Published
2018-06-25
Title
JS Support Ticket < 2.0.6 - CSRF
Fixed in
Fixed in 2.0.6
CVSS
8.8 (high)