CVE-2024-43274: WordPress JS Help Desk – The Ultimate Help Desk plugin <= 2.8.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.6.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43274?
CVE-2024-43274 is classified as a missing authorization vulnerability that allows unauthorized access to functionalities within the JS Help Desk plugin.
How do I fix CVE-2024-43274?
To remediate CVE-2024-43274, update the JS Help Desk plugin to version 2.8.7 or later, where the vulnerability is addressed.
What software is affected by CVE-2024-43274?
CVE-2024-43274 affects JS Help Desk – Best Help Desk & Support Plugin versions up to and including 2.8.6.
What are the risks associated with CVE-2024-43274?
The risks include unauthorized users potentially accessing restricted functionalities of the help desk system, leading to data leaks or service disruptions.
When was CVE-2024-43274 disclosed?
CVE-2024-43274 was publicly disclosed in 2024, although the specific date is not provided.