Js Help Desk (Unknown) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-07-31. Vendor: Unknown.

CVEs of Js Help Desk

• CVE-2026-15209 - CVSS 6.5 (medium), 2026-07-31: The JS Help Desk WordPress plugin before 3.1.5 does not verify that the requesting user owns the ticket being loaded: a low-privileged authenticated user can…
• CVE-2026-14931 - CVSS 6.5 (medium), 2026-07-31: The JS Help Desk WordPress plugin before 3.1.4 grants a support-agent capability to the Contributor role on activation and does not perform a capability check…
• CVE-2026-14930 - CVSS 7.5 (high), 2026-07-31: The JS Help Desk WordPress plugin before 3.1.4 does not perform any authorization, nonce, or ownership check on a front-end request dispatcher, allowing…
• CVE-2026-14929 - CVSS 4.3 (medium), 2026-07-31: The JS Help Desk WordPress plugin before 3.1.4 does not verify ownership of the targeted reply before updating it, allowing any authenticated user (Subscriber…
• CVE-2026-14928 - CVSS 6.5 (medium), 2026-07-31: The JS Help Desk WordPress plugin before 3.1.4 does not perform authorization or ownership checks before returning support-ticket content in a nonce-gated…