Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how joomsky compares to other vendors in security performance

View Risk Score →

joomsky JS Help DeskWordPress JS Help Desk plugin <= 3.0.3 - Insecure Direct Object References (IDOR) vulnerability

Risk 38
Severity
6.5
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through <= 3.0.3.

First published (updated )
CVE-2026-32535

joomsky JS Help DeskWordPress JS Help Desk plugin <= 3.0.3 - SQL Injection vulnerability

Risk 55
Severity
8.5
SQL Injection
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help Desk js-support-ticket allows Blind SQL Injection.This issue affects JS Help Desk: from n/a through <= 3.0.3.

First published (updated )
CVE-2026-32534

joomsky JS Job ManagerWordPress JS Job Manager Plugin <= 2.0.2 - Cross Site Scripting (XSS) Vulnerability

Risk 34
Severity
6.5
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Job Manager js-jobs allows Stored XSS.This issue affects JS Job Manager: from n/a through <= 2.0.2.

First published (updated )
CVE-2025-58234

joomsky JS JobsExtension - joomsky.com - SQL injection in JS jobs component version 1.3.2 - 1.4.4 for Joomla

Risk 79
Severity
8.7
SQL Injection
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

A SQL injection vulnerability in the JS Jobs plugin versions 1.3.2-1.4.4 for Joomla allows low-privilege users to execute arbitrary SQL commands.

First published (updated )
CVE-2025-54475

joomsky JS Job ManagerWordPress JS Job Manager plugin <= 2.0.2 - SQL Injection vulnerability

Risk 61
Severity
9.8
EPSS
0.04%
SQL Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Job Manager js-jobs allows SQL Injection.This issue affects JS Job Manager: from n/a through <= 2.0.2.

First published (updated )
CVE-2025-32626

joomsky JS Job ManagerWordPress JS Job Manager plugin <= 2.0.2 - Arbitrary File Upload vulnerability

Risk 61
Severity
10
EPSS
0.06%
Malicious File Upload
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Unrestricted Upload of File with Dangerous Type vulnerability in JoomSky JS Job Manager js-jobs allows Upload a Web Shell to a Web Server.This issue affects JS Job Manager: from n/a through <= 2.0.2.

First published (updated )
CVE-2025-32660

joomsky JS Job ManagerWordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability

Risk 32
Severity
8.1
EPSS
0.15%
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager js-jobs allows PHP Local File Inclusion.This issue affects JS Job Manager: from n/a through <= 2.0.2.

First published (updated )
CVE-2025-32627

joomsky JS Job ManagerWordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability

Risk 35
Severity
8.8
EPSS
0.13%
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager js-jobs allows PHP Local File Inclusion.This issue affects JS Job Manager: from n/a through <= 2.0.2.

First published (updated )
CVE-2025-32146

joomsky JS Job ManagerWordPress JS Job Manager plugin <= 2.0.2 - Broken Access Control vulnerability

Risk 21
Severity
5.3
EPSS
0.04%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Missing Authorization vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through <= 2.0.2.

First published (updated )
CVE-2025-31868

joomsky JS Job ManagerWordPress JS Job Manager Plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability

Risk 22
Severity
5.4
EPSS
0.04%
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through <= 2.0.2.

First published (updated )
CVE-2025-31867

joomsky JS Help DeskWordPress JS Help Desk plugin <= 2.9.2 - Local File Inclusion vulnerability

Risk 32
Severity
8.1
EPSS
0.15%
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Help Desk js-support-ticket allows PHP Local File Inclusion.This issue affects JS Help Desk: from n/a through <= 2.9.2.

Remedy

Update the WordPress JS Help Desk plugin to the latest available version (at least 2.9.3).
First published (updated )
CVE-2025-30901

joomsky JS Help DeskWordPress JS Help Desk plugin <= 2.9.2 - SQL Injection vulnerability

Risk 61
Severity
10
EPSS
0.04%
SQL Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help Desk js-support-ticket allows SQL Injection.This issue affects JS Help Desk: from n/a through <= 2.9.2.

Remedy

Update the WordPress JS Help Desk plugin to the latest available version (at least 2.9.3).
First published (updated )
CVE-2025-30886

joomsky JS Help DeskWordPress JS Help Desk plugin <= 2.9.2 - Broken Access Control vulnerability

Risk 30
Severity
7.5
EPSS
0.05%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Missing Authorization vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through <= 2.9.2.

Remedy

Update the WordPress JS Help Desk plugin to the latest available version (at least 2.9.3).
First published (updated )
CVE-2025-30880

joomsky JS Help DeskWordPress JS Help Desk plugin <= 2.9.1 - Arbitrary File Download vulnerability

Risk 30
Severity
7.5
EPSS
0.06%
Path Traversal
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk js-support-ticket allows Path Traversal.This issue affects JS Help Desk: from n/a through <= 2.9.1.

Remedy

Update the WordPress JS Help Desk plugin to the latest available version (at least 2.9.2).
First published (updated )
CVE-2025-30882

joomsky JS Help DeskWordPress JS Help Desk plugin <= 2.9.2 - Arbitrary File Deletion vulnerability

Risk 47
Severity
9.1
EPSS
0.06%
Path Traversal
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk js-support-ticket allows Path Traversal.This issue affects JS Help Desk: from n/a through <= 2.9.2.

Remedy

Update the WordPress JS Help Desk plugin to the latest available version (at least 2.9.3).
First published (updated )
CVE-2025-30878

joomsky WP Vehicle Manager (js-vehicle-manager)WordPress Vehicle Manager plugin <= 3.1 - Local File Inclusion vulnerability

Risk 32
Severity
8.1
EPSS
0.04%
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky WP Vehicle Manager js-vehicle-manager allows PHP Local File Inclusion.This issue affects WP Vehicle Manager: from n/a through <= 3.1.

First published (updated )
CVE-2025-25109

joomsky JS JobsExtension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.3 for Joomla

Risk 36
Severity
4.7
SQL Injection
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'filteremail' parameter in the GDPR Erase Data Request search feature.

First published (updated )
CVE-2025-22208

Joomla JS JobsExtension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.3 for Joomla

Risk 36
Severity
4.7
SQL Injection
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'searchpaymentstatus' parameter in the Employer Payment History search feature.

First published (updated )
CVE-2025-22209

joomsky JS JobsExtension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.2 for Joomla

Risk 36
Severity
4.7
SQL Injection
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.2 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands via the 'fieldfor' parameter in the GDPR Field feature.

First published (updated )
CVE-2025-22206

JS Help Desk JS Help Desk – Best Help Desk & Support PluginWordPress JS Help Desk plugin <= 2.7.1 - Unauthenticated Settings Change Vulnerability

Risk 66
Severity
9.1
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Missing Authorization vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through <= 2.7.1.

Remedy

Update the WordPress JS Help Desk – Best Help Desk & Support Plugin plugin to the latest available version (at least 2.7.2).
First published (updated )
CVE-2022-46838

JS Help Desk JS Help Desk – Best Help Desk & Support PluginWordPress JS Help Desk plugin <= 2.7.1 - Broken Access Control

Risk 34
Severity
5.4
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Missing Authorization vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through <= 2.7.1.

Remedy

Update the WordPress JS Help Desk – Best Help Desk & Support Plugin plugin to the latest available version (at least 2.7.2).
First published (updated )
CVE-2022-46840

joomsky JS Job ManagerWordPress JS Job Manager plugin <= 2.0.0 - Broken Access Control vulnerability

Risk 38
Severity
6.5
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Missing Authorization vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through <= 2.0.0.

Remedy

No patched version available.
First published (updated )
CVE-2023-28689

JS Help Desk JS Help DeskWordPress JS Help Desk plugin <= 2.8.7 - Stored Cross Site Scripting (XSS) vulnerability

Risk 29
Severity
5.9
XSS
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Help Desk js-support-ticket allows Stored XSS.This issue affects JS Help Desk: from n/a through <= 2.8.7.

Remedy

Update to 2.8.8 or a higher version.
First published (updated )
CVE-2024-51670

JS Help Desk JS Help DeskWordPress JS Help Desk – The Ultimate Help Desk plugin <= 2.8.6 - Broken Access Control vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.6.

Remedy

Update to 2.8.7 or a higher version.
First published (updated )
CVE-2024-43274

JS Help Desk JS Help Desk – Best Help Desk & Support PluginWordPress JS Help Desk – Best Help Desk & Support Plugin plugin <= 2.7.7 - Arbitrary File Upload vulnerability

Risk 72
Severity
9.1
Malicious File Upload
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Using Malicious Files.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.7.

Remedy

Update to 2.7.8 or a higher version.
First published (updated )
CVE-2023-25444

JS Help Desk JS Help DeskWordPress JS Help Desk plugin <= 2.7.1 - Unauth. SQL Injection Vulnerability

Risk 64
Severity
8.6
SQL Injection
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.

Remedy

Update to 2.7.2 or a higher version.
First published (updated )
CVE-2022-47151

joomsky Js Job Manager WordpressWordPress JS Jobs Manager plugin <= 2.0.0 - Cross Site Request Forgery (CSRF) vulnerability

Risk 77
Severity
8.8
CSRF
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

A vulnerability in JoomSky JS Job Manager js-jobs.This issue affects JS Job Manager: from n/a through <= 2.0.0.

Remedy

Update to 2.0.1 or a higher version.
First published (updated )
CVE-2023-31087

joomsky Js Job Manager WordpressWordPress JS Job Manager Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)

Risk 40
Severity
5.9
XSS
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions.

Remedy

Update to 2.0.1 or a higher version.
First published (updated )
CVE-2023-25963

joomsky Js Jobs Joomla\!SQL Injection

Risk 86
Severity
9.8
SQL Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

dataForDepandantField in models/custormfields.php in the JS JOBS FREE extension before 1.2.7 for Joomla! allows SQL Injection via the index.php?option=comjsjobs&task=customfields.getfieldtitlebyfieldandfieldfo child parameter.

First published (updated )
CVE-2019-17527

joomsky Js Help Desk WordpressCSRF

Risk 77
Severity
8.8
CSRF
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

The js-support-ticket plugin before 2.0.6 for WordPress has CSRF.

First published (updated )
CVE-2018-21002

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203