Skip to content
OpenAdvisories
Critical · 9.1 CVE-2022-46838 EUVD-2022-49619GHSA-v2q3-j5hx-299f

WordPress JS Help Desk plugin <= 2.7.1 - Unauthenticated Settings Change Vulnerability

Published Dec 13, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.

Affected products

VendorProductAffectedFixed
JS Help Desk JS Help Desk – Best Help Desk & Support Plugin ≤ 2.7.1 —

References