WordPress Plugin Vulnerabilities

JS Support Ticket < 2.0.6 - CSRF

Description

The JS Help Desk – Best Help Desk & Support Plugin WordPress plugin was affected by a CSRF security vulnerability.

Affects Plugins

Plugin icon
js-support-ticket
Fixed in 2.0.6

References

CVE
CVE-2018-21002

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
8.8 (high)

Miscellaneous

Verified
No
WPVDB ID
4292cbc9-9469-4a45-87f4-90b6fd2261df

Timeline

Publicly Published
2018-06-25 (about 7 years ago)
Added
2019-08-27 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2025-01-16
Title
WP Custom Google Search <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2025-11-03
Title
Posts Navigation Links for Sections and Headings - Free by WP Masters <= 1.0.1 - Cross-Site Request Forgery to Settings Update
Published
2024-10-14
Title
CJ Change Howdy <= 3.3.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2023-09-12
Title
Quiz And Survey Master < 8.1.16 - Cross-Site Request Forgery via 'display_results'
Published
2015-03-10
Title
Fraction Theme < 1.1.2 - Privilege Escalation