JS Help Desk
JoomSky
Developer
3.0.6
Latest version
8,000
Installations
No date
Last updated
Vulnerability history
0 present
24 patched
19 Mitigation rules
- WordPress JS Help Desk - AI-Powered Support & Ticketing System plugin <= 3.0.4 - Unauthenticated SQL Injection via 'multiformid' Parameter vulnerability<= 3.0.44 days ago
- Insecure Direct Object References (IDOR) vulnerability<= 3.0.323/03/2026
- SQL Injection vulnerability<= 3.0.320/03/2026
- WordPress JS Help Desk - AI-Powered Support & Ticketing System plugin 2.8.2 - Unauthenticated SQL Injection via 'js-support-ticket-token-tkstatus' Cookie vulnerability<= 2.8.204/03/2026
- SQL Injection vulnerability<= 3.0.111/02/2026
- Broken Access Control vulnerability<= 2.9.227/03/2025
- SQL Injection vulnerability<= 2.9.227/03/2025
- Arbitrary File Download vulnerability<= 2.9.127/03/2025
- Arbitrary File Deletion vulnerability<= 2.9.227/03/2025
- Local File Inclusion vulnerability<= 2.9.227/03/2025
- Unauthenticated Sensitive Information Exposure Through Unprotected Directory vulnerability<= 2.8.812/02/2025
- Authenticated (Subscriber+) Insecure Direct Object Reference vulnerability<= 2.8.803/02/2025
- Stored Cross Site Scripting (XSS) vulnerability<= 2.8.701/11/2024
- Unauthenticated Remote Code Execution vulnerability<= 2.8.612/08/2024
- Broken Access Control vulnerability<= 2.8.612/08/2024
- Broken Access Control vulnerability<= 2.8.305/04/2024
- Unauthenticated SQL Injection vulnerability<= 2.8.121/12/2023
- Arbitrary File Upload vulnerability<= 2.7.717/08/2023
- IDOR Leading To Ticket Deletion vulnerability<= 2.7.720/06/2023
- Broken Access Control<= 2.7.127/01/2023
- Arbitrary File Upload Vulnerability<= 2.7.127/01/2023
- Unauthenticated Settings Change Vulnerability<= 2.7.127/01/2023
- Multiple Cross Site Request Forgery (CSRF) Vulnerabilities<= 2.7.127/01/2023
- Unauthenticated SQL Injection Vulnerability<= 2.7.127/01/2023