CodeBard Help Desk
CodeBard Help Desk has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; 1 is fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 5.6, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Cross-Site Request Forgery (CSRF).
1 of the records (33%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2025.
All of these findings were reported by hunter85. CodeBard Help Desk is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2025-22757CodeBard Help Desk <= 1.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

CodeBard Help Desk
Author
CodeBard
Provide professional support to users in your own language with CodeBard Help Desk. Check out the Live Demo here Its professional features include: Unlimited Users Unlimited Agents Unlimited Tickets Unlimited Departments Multi Language Easy Language translation from WP admin English, Spanish (Intl.), Indian (Hindu) languages included Front End Tickets Front End Interface for Users Front End Interface for Support Admins and Agents Easy to Use Private Tickets Email Notifications Ticket and Reply Attachments Support Admins, Support Agents with separate permissions Easy ticket management Responsive Extensible Compatible with all Themes and Plugins Adapts to visuals of any Theme Hooks and Filters In the Live Demo, try changing the theme from Theme Switcher widget on the right column to see how CodeBard Help Desk adapts to different themes! Use Language admin to easily translate your plugin into your own language or change your own language’s translation. New language packs will be upcoming! If you would like to contribute a translation for your own language, download this sample language file to translate and then contact us from our contact page to get credited. Quickstart Guide is here and detailed manual is here. All settings in your Plugin admin has detailed and easy to understand descriptions. Free support is available through Plugin forum, and Premium support is available through CodeBard site. If you have a WooCommerce store, get the WooCommerce Integration Addon to power up your Help Desk and provide professional support to your store’s customers easily: Remember to follow us on Twitter (@codebardcom) or join our Newsletter by your Quickstart Wizard to hear about new features, announcements and goodies!
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C