CVE-2026-119513: WordPress JS Help Desk plugin <= 5.0.3 - Broken Access Control vulnerability
Published Nov 7, 2026
·Updated
Missing Authorization vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through 5.0.3.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress JS Help Desk (js-support-ticket)to a version that resolves this vulnerability.Fixed in 5.0.4
Event History
Nov 7, 2026
CVE Published
via MITRE·10:40 AM
Data Sourced
via MITRE·10:40 AM
RemedyDescriptionSeverityWeakness