https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-30901.htmlhttps://patchthecve.com/cve/CVE-2025-30901.htmlWed, 17 Jun 2026 09:09:32 +0000HIGH 8.1: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Help Desk js-support-ticket allows PHP Local File Inclusion.This issue affects JS Help Desk: from n/a through <= 2.9.2.https://patchthecve.com/cve/CVE-2025-30886.htmlhttps://patchthecve.com/cve/CVE-2025-30886.htmlWed, 17 Jun 2026 09:09:31 +0000CRITICAL 9.3: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help Desk js-support-ticket allows SQL Injection.This issue affects JS Help Desk: from n/a through <= 2.9.2.https://patchthecve.com/cve/CVE-2025-30882.htmlhttps://patchthecve.com/cve/CVE-2025-30882.htmlWed, 17 Jun 2026 09:09:30 +0000HIGH 7.5: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk js-support-ticket allows Path Traversal.This issue affects JS Help Desk: from n/a through <= 2.9.1.https://patchthecve.com/cve/CVE-2025-30880.htmlhttps://patchthecve.com/cve/CVE-2025-30880.htmlWed, 17 Jun 2026 09:09:30 +0000HIGH 7.5: Missing Authorization vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through <= 2.9.2.https://patchthecve.com/cve/CVE-2025-30878.htmlhttps://patchthecve.com/cve/CVE-2025-30878.htmlWed, 17 Jun 2026 09:09:30 +0000HIGH 8.6: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk js-support-ticket allows Path Traversal.This issue affects JS Help Desk: from n/a through <= 2.9.2.https://patchthecve.com/cve/CVE-2024-13606.htmlhttps://patchthecve.com/cve/CVE-2024-13606.htmlWed, 17 Jun 2026 07:02:21 +0000HIGH 7.5: The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.8 via the 'jssupportticketdata' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored ihttps://patchthecve.com/cve/CVE-2022-46840.htmlhttps://patchthecve.com/cve/CVE-2022-46840.htmlWed, 17 Jun 2026 05:12:30 +0000MEDIUM 5.4: Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.https://patchthecve.com/cve/CVE-2022-46838.htmlhttps://patchthecve.com/cve/CVE-2022-46838.htmlWed, 17 Jun 2026 05:12:30 +0000CRITICAL 9.1: Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.https://patchthecve.com/cve/CVE-2024-51670.htmlhttps://patchthecve.com/cve/CVE-2024-51670.htmlWed, 17 Jun 2026 08:06:07 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Help Desk js-support-ticket allows Stored XSS.This issue affects JS Help Desk: from n/a through <= 2.8.7.https://patchthecve.com/cve/CVE-2024-43274.htmlhttps://patchthecve.com/cve/CVE-2024-43274.htmlWed, 17 Jun 2026 07:50:43 +0000MEDIUM 5.8: Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.6.https://patchthecve.com/cve/CVE-2024-31273.htmlhttps://patchthecve.com/cve/CVE-2024-31273.htmlWed, 17 Jun 2026 07:28:06 +0000MEDIUM 5.3: Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.3.https://patchthecve.com/cve/CVE-2023-25444.htmlhttps://patchthecve.com/cve/CVE-2023-25444.htmlWed, 17 Jun 2026 05:41:14 +0000CRITICAL 9.1: Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Using Malicious Files.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.7.https://patchthecve.com/cve/CVE-2022-47151.htmlhttps://patchthecve.com/cve/CVE-2022-47151.htmlWed, 17 Jun 2026 05:13:07 +0000HIGH 8.6: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.