Ahmad JS Help Desk vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Ahmad JS Help Desk: 5 record(s), with affected versions and fixes.
CVE-2026-103079
Medium · 5.4
CWE-639 Oct 5, 2026
WordPress JS Help Desk plugin <= 4.0.0 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through 4.0.0.
CVE-2026-103078
Medium · 4.3
CWE-639 Oct 5, 2026
WordPress JS Help Desk plugin <= 4.0.0 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through 4.0.0.
CVE-2026-56054
High · 7.7
CWE-22 Jun 25, 2026
WordPress JS Help Desk plugin <= 3.1.1 - Arbitrary File Deletion vulnerability
Subscriber Arbitrary File Deletion in JS Help Desk <= 3.1.1 versions.
CVE-2026-48887
Medium · 6.5
CWE-862 Jun 15, 2026
WordPress JS Help Desk plugin <= 3.0.9 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in JS Help Desk <= 3.0.9 versions.
CVE-2026-48886
Critical · 9.3
CWE-89 Jun 15, 2026
WordPress JS Help Desk plugin <= 3.0.9 - SQL Injection vulnerability
Unauthenticated SQL Injection in JS Help Desk <= 3.0.9 versions.