Skip to content
OpenAdvisories

Vendor

rabilal

8 known vulnerabilities.

Products

JS Help Desk – AI-Powered Support & Ticketing System 7 WP Learn Manager 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-2511

    JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.4 - Unauthenticated SQL Injection via 'multiformid' Parameter

    The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to SQL Injection via the `multiformid` parameter in the `storeTickets()` function in all versions up to, and including, 3.0.4. This is due to the user-supplied `multif…

    rabilal JS Help Desk – AI-Powered Support & Ticketing System Web / CMS
  • High 7.5
    CVE-2023-7337 Scanner template

    JS Help Desk – AI-Powered Support & Ticketing System 2.8.2 - Unauthenticated SQL Injection via 'js-support-ticket-token-tkstatus' Cookie

    The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to SQL Injection via the 'js-support-ticket-token-tkstatus' cookie in version 2.8.2 due to an incomplete fix for CVE-2023-50839 where a second sink was left with insuf…

    rabilal JS Help Desk – AI-Powered Support & Ticketing System Web / CMS
  • High 7.5
    CVE-2024-13606

    JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

    The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.8 via the 'jssupportticketdata' directory. This makes it possible for unauthenticated att…

    rabilal JS Help Desk – AI-Powered Support & Ticketing System Web / CMS