Skip to content
OpenAdvisories

Vendor

helpdeskcom

1 known vulnerabilities.

Products

HelpDesk Contact Form 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2025-13657

    HelpDesk contact form plugin <= 1.1.5 - Cross-Site Request Forgery to Settings Update via handle_query_args

    The HelpDesk contact form plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.5. This is due to missing or incorrect nonce validation on the handle_query_args() function. This makes it possible for unauth…

    helpdeskcom HelpDesk Contact Form Web / CMS