WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
js-support-ticket
Published
2024-08-12
Title
JS Help Desk – The Ultimate Help Desk & Support Plugin < 2.8.7 - Unauthenticated PHP Code Injection to Remote Code Execution
Slug
js-support-ticket
Published
2024-11-01
Title
JS Help Desk – Best Help Desk & Support Plugin < 2.8.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
js-support-ticket
Published
2025-02-03
Title
JS Help Desk – The Ultimate Help Desk & Support Plugin < 2.8.9 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
js-support-ticket
Published
2025-02-12
Title
JS Help Desk – The Ultimate Help Desk & Support Plugin < 2.8.9 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Slug
js-support-ticket
Published
2025-03-27
Title
JS Help Desk < 2.9.3 - Unauthenticated SQL Injection
Slug
js-support-ticket
Published
2025-03-27
Title
JS Help Desk < 2.9.3 - Missing Authorization
Slug
js-support-ticket
Published
2025-03-27
Title
JS Help Desk < 2.9.3 - Unauthenticated Local File Inclusion
Slug
js-support-ticket
Published
2025-03-27
Title
JS Help Desk < 2.9.2 - Unauthenticated Arbitrary File Download
Slug
js-support-ticket
Published
2025-03-27
Title
JS Help Desk < 2.9.3 - Unauthenticated Arbitrary File Deletion
Slug
js-support-ticket
Published
2026-02-11
Title
JS Help Desk < 3.0.2 - Authenticated (Subscriber+) SQL Injection
Slug
js-support-ticket
Published
2026-03-03
Title
JS Help Desk < 2.8.3 - Unauthenticated SQL Injection via 'js-support-ticket-token-tkstatus' Cookie
Slug
js-support-ticket
Published
2026-03-20
Title
JS Help Desk – AI-Powered Support & Ticketing System < 3.0.4 - Authenticated (Subscriber+) SQL Injection
Slug
js-support-ticket
Published
2026-03-25
Title
JS Help Desk – AI-Powered Support & Ticketing System < 3.0.5 - Unauthenticated SQL Injection via 'multiformid' Parameter
Slug
js-support-ticket
Published
2026-03-23
Title
JS Help Desk – AI-Powered Support & Ticketing System < 3.0.4 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
js-support-ticket
Published
2026-06-02
Title
JS Help Desk – AI-Powered Support & Ticketing System < 3.1.0 - Missing Authorization
Slug
js-support-ticket
Published
2026-06-02
Title
JS Help Desk – AI-Powered Support & Ticketing System < 3.1.0 - Unauthenticated SQL Injection
Slug
js-support-ticket
Published
2026-06-26
Title
JS Help Desk – AI-Powered Support & Ticketing System < 3.1.1 - Unauthenticated Insecure Direct Object Reference
Slug
js-support-ticket
Published
2026-06-25
Title
JS Help Desk – AI-Powered Support & Ticketing System < 3.1.2 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
js-support-ticket
Published
2026-07-13
Title
JS Help Desk < 3.1.4 - Subscriber+ Sensitive Information Disclosure via checkAIReplyTicketsBySubject
Slug
js-support-ticket
Published
2026-07-13
Title
JS Help Desk < 3.1.4 - Unauthenticated Arbitrary Ticket File Attachment Upload
Slug
js-support-ticket
Published
2026-07-13
Title
JS Help Desk < 3.1.4 - Subscriber+ Ticket Reply Modification via IDOR
Slug
js-support-ticket
Published
2026-07-13
Title
JS Help Desk < 3.1.4 - Contributor+ User Email Disclosure
Slug
js-support-ticket
Published
2026-07-13
Title
JS Help Desk – AI-Powered Support & Ticketing System < 3.1.5 - Subscriber+ Cross-User Support Ticket Disclosure via IDOR
Slug
js-twentytwenty
Published
2025-01-07
Title
jQuery TwentyTwenty <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
js-vehicle-manager
Published
2025-02-02
Title
WP Vehicle Manager <= 3.1 - Unauthenticated Local File Inclusion