JS Help Desk vulnerabilities

We track 9 vulnerabilities in JS Help Desk products across 2 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on July 31, 2026.

9vulnerabilities

6critical

3high

0exploited

9.1average CVSS score

Latest JS Help Desk vulnerabilities

7.5 High severity
JS Help Desk: Missing Authorization
CVE-2026-14930Jul 31, 2026JS Help Desk
The JS Help Desk WordPress plugin before 3.1.4 does not perform any authorization, nonce, or ownership check on a front-end request dispatcher, allowing unauthenticated users to upload files (limited to the JS Help Desk WordPress plugin before 3.1.4's inert al
9.1 Critical severity
JS Help Desk – Best Help Desk & Support Plugin: Missing Authorization
CVE-2022-46838Dec 13, 2024JS Help Desk
Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1
9.8 Critical severity
JS Help Desk – Best Help Desk & Support Plugin: Missing Authorization
CVE-2024-43274Nov 1, 2024JS Help Desk
Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.6.
9.8 Critical severity
JS Help Desk – Best Help Desk & Support Plugin: Missing Authorization
CVE-2024-31273Jun 9, 2024JS Help Desk
Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.3.
9.1 Critical severity
JS Help Desk – Best Help Desk & Support Plugin: Unrestricted Upload of File with Dangerous Type
CVE-2023-25444May 17, 2024JS Help Desk
Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Using Malicious Files.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.7.
8.6 High severity
JS Help Desk – Best Help Desk & Support Plugin: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-47151Apr 17, 2024JS Help Desk
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.
9.8 Critical severity
JS Help Desk – Best Help Desk & Support Plugin: Unrestricted Upload of File with Dangerous Type
CVE-2022-46839Jan 5, 2024JS Help Desk
Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.
9.8 Critical severity
JS Help Desk – Best Help Desk & Support Plugin: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-50839Dec 28, 2023JS Help DeskEPSS 2.04%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.1.
8.8 High severity
JS Help Desk: Authorization Bypass Through User-Controlled Key
CVE-2023-23679Jun 23, 2023JS Help Desk
Authorization Bypass Through User-Controlled Key vulnerability in JS Help Desk js-support-ticket allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk: from n/a through 2.7.7.