JS Help Desk – AI-Powered Support & Ticketing System

Explore JS Help Desk – AI-Powered Support & Ticketing System vulnerabilities across all versions. Currently tracking 28 known vulnerabilities, including severity, impact, and patch status.

01234567891010.10.2014Today25.06.20188.8JS Help Desk – Best Help Desk & Support Plugin <= 2.0.5 - Cross-Site Request Forgery CVSS 8.8 · 25.06.201827.01.20239.1JS Help Desk <= 2.7.1 - Missing Authorization to Plugin Settings Update CVSS 9.1 · 27.01.20238.6JS Help Desk <= 2.7.1 - Unauthenticated SQL Injection CVSS 8.6 · 27.01.20236.3JS Help Desk <= 2.7.1 - Missing Authorization CVSS 6.3 · 27.01.20239.8JS Help Desk <= 2.7.1 - Unauthenticated Arbitrary File Upload CVSS 9.8 · 27.01.20235.4JS Help Desk <= 2.7.1 - Cross-Site Request Forgery CVSS 5.4 · 27.01.202320.06.20236.3JS Help Desk – Best Help Desk & Support Plugin <= 2.7.7 - Authenticated (Subscriber+) Insecure Direct Object Reference CVSS 6.3 · 20.06.202317.08.20237.2JS Help Desk – Best Help Desk & Support Plugin <= 2.7.7 - Authenticated (Administrator+) Arbitrary File Upload CVSS 7.2 · 17.08.202321.12.20239.8JS Help Desk <= 2.8.1 - Unauthenticated SQL Injection via email and trackingid CVSS 9.8 · 21.12.202305.04.20245.3JS Help Desk – Best Help Desk & Support Plugin <= 2.8.3 - Missing Authorization CVSS 5.3 · 05.04.202412.08.20249.8JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.6 - Unauthenticated PHP Code Injection to Remote Code Execution CVSS 9.8 · 12.08.202401.11.20244.4JS Help Desk – Best Help Desk & Support Plugin <= 2.8.7 - Authenticated (Administrator+) Stored Cross-Site Scripting CVSS 4.4 · 01.11.202403.02.20254.3JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Authenticated (Subscriber+) Insecure Direct Object Reference CVSS 4.3 · 03.02.202512.02.20257.5JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory CVSS 7.5 · 12.02.202527.03.20255.3JS Help Desk <= 2.9.2 - Missing Authorization CVSS 5.3 · 27.03.20259.1JS Help Desk <= 2.9.2 - Unauthenticated Arbitrary File Deletion CVSS 9.1 · 27.03.20257.5JS Help Desk <= 2.9.1 - Unauthenticated Arbitrary File Download CVSS 7.5 · 27.03.20259.8JS Help Desk <= 2.9.2 - Unauthenticated Local File Inclusion CVSS 9.8 · 27.03.20257.5JS Help Desk <= 2.9.2 - Unauthenticated SQL Injection CVSS 7.5 · 27.03.202511.02.20266.5JS Help Desk <= 3.0.1 - Authenticated (Subscriber+) SQL Injection CVSS 6.5 · 11.02.202603.03.20267.5JS Help Desk – AI-Powered Support & Ticketing System 2.8.2 - Unauthenticated SQL Injection via 'js-support-ticket-token-tkstatus' Cookie CVSS 7.5 · 03.03.202620.03.20266.5JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.3 - Authenticated (Subscriber+) SQL Injection CVSS 6.5 · 20.03.202623.03.20264.3JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.3 - Authenticated (Subscriber+) Insecure Direct Object Reference CVSS 4.3 · 23.03.202625.03.20267.5JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.4 - Unauthenticated SQL Injection via 'multiformid' Parameter CVSS 7.5 · 25.03.202602.06.20265.3JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.9 - Missing Authorization CVSS 5.3 · 02.06.20267.5JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.9 - Unauthenticated SQL Injection CVSS 7.5 · 02.06.202625.06.20268.8JS Help Desk – AI-Powered Support & Ticketing System <= 3.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion CVSS 8.8 · 25.06.202626.06.20265.3JS Help Desk – AI-Powered Support & Ticketing System <= 3.1.0 - Unauthenticated Insecure Direct Object Reference CVSS 5.3 · 26.06.2026

Strategic Overview

Avg CVSSHigh
7.2/ 10
Patch Coverage100%
Open

0

Fixed

28

Get automatic notifications for all JS Help Desk – AI-Powered Support & Ticketing System vulnerabilities before they are exploited.

Vulnerability Records

28 records
2026-06-26 00:00CVE-2026-57652
5.3
Medium
William MatosYes
2026-06-25 00:00CVE-2026-56054
8.8
High
darooYes
2026-06-02 00:00CVE-2026-48887
5.3
Medium
NvzYes
2026-06-02 00:00CVE-2026-48886
7.5
High
sequence_X0Yes
2026-03-25 00:00CVE-2026-2511
7.5
High
Nabil IrawanYes
2026-03-23 00:00CVE-2026-32535
4.3
Medium
BondsYes
2026-03-20 00:00CVE-2026-32534
6.5
Medium
BondsYes
2026-03-03 20:36CVE-2023-7337
7.5
High
AnonymousYes
2026-02-11 00:00CVE-2026-24959
6.5
Medium
BondsYes
2025-03-27 00:00CVE-2025-30880
5.3
Medium
LVT-tholv2kYes
Showing 1–10 of 28 reports
JS Help Desk – AI-Powered Support &amp; Ticketing System banner
Latestv3.1.6

JS Help Desk – AI-Powered Support &amp; Ticketing System

JoomSky

Author

JoomSky

3.7(74)
74/100
Last Updated
2026-07-24 (6d ago)
Active Installs
7,000+
Downloads
666,670
Requires WP
5.5+
Requires PHP
7.4+
Tested up to
WP 7.0.2
Created
2014-10-10 (12y ago)

JS Help Desk is a professional, AI-enhanced helpdesk and customer support system for WordPress. It offers a complete ticketing solution with front-end submission, guest tickets, and a native AI Copilot to boost agent efficiency. Powered by Zywrap, the AI Copilot brings top-tier large language models directly into your ticket editor. Call AI by Code. Zero Prompt Engineering. Key Resources JS Help Desk Demo Plugin Homepage Video Tutorials Free Version Major Features Core Ticketing & Management – Professional Support System: Enterprise-level ticketing for all users. – Unlimited Tickets & Agents: No artificial limits on your growth. – Unlimited Departments: Organize by Sales, Support, Billing, etc. – Priority Management: Highlight urgent issues with custom colors. – Internal Notes: Agents can add private notes for internal collaboration. – Custom Statuses: Track ticket progress with clear status messages. Zywrap AI Copilot (New!) – Zero Prompt Engineering: Agents don’t need to write prompts. Simply select a Support Intent (e.g., “Ask for Info” or “Escalate”) and the AI does the rest. – 1-Click Summaries: Instantly summarize long, complex ticket threads to get up to speed in seconds. – Smart Data Extraction: Automatically extract error codes, browser versions, and URLs from customer messages into clean, readable Data Cards. – Instant Translation: Break language barriers by translating customer messages or agent replies with a single click. – Auto-Draft Replies: Generate complete, professional responses based on the context of the entire ticket history. – Dynamic Routing: Automatically routes requests through the best available AI models (OpenAI, Anthropic, Gemini, Groq) via the Zywrap API. User & Agent Experience – Front-end Submission: Users create and track tickets without accessing the dashboard. – Guest/Visitor Tickets: Allow users to open tickets without creating an account. – Fully Responsive: Optimized for smartphones, tablets, and desktops. – HTML Editor: Rich text support for ticket summaries and replies. – Multiple Attachments: Admin-controlled size and file type limits. Automation & AI – AI-Powered Reply Suggestions: Generate context-aware smart responses to save time. – Email Notifications: Automated alerts for new tickets, replies, and status changes. – Field & Email Managers: Full control over 12+ custom fields and HTML email templates. Security & Compliance – GDPR Ready: Built-in tools for data erasure and anonymization. – Spam Protection: Supports built-in Captcha and Google reCAPTCHA. – Terms & Conditions: Require agreement before ticket submission. Customization & Reporting – Color Themes: 7 preset palettes to match your brand. – Detailed Reports: Summaries by agent, department, priority, and status. – RTL Ready: Full support for right-to-left languages. – Translations: Supports 35+ languages including French, German, Spanish, Arabic, and Chinese. Shortcodes [jssupportticket] – Control Panel [jssupportticket_addticket] – Add New Ticket form [jssupportticket_mytickets] – User Ticket List Premium Add-Ons JS Help Desk is a complete help desk system with 35+ professional addons. Email Piping – Create/reply to tickets via email. Time Tracking – Log time spent on resolutions. Paid Support – Charge per ticket or subscription. Agents – Multi-agent management & permissions. Agent Auto Assign – Rule-based ticket routing. Multi Forms – Unique forms per department. Merge Tickets – Combine duplicate queries easily. Ticket Overdue – Track SLA deadlines & response times. SMTP – Custom email protocol for reliability. Ban Email – Block specific users or domains. WooCommerce – Connect support to customer orders. Private Credentials – Store & auto-delete sensitive data. Email CC – Keep stakeholders updated on tickets. Export – Export ticket data/history to CSV. Desktop Notification – Real-time browser alerts. Ticket History – Full audit log of all ticket actions. Ticket Auto Close – Auto-close inactive ticket threads. Feedback – Collect agent performance ratings. Helptopic – Categorize queries for easy browsing. Private Note – Private internal agent communication. Knowledge Base – Self-service documentation portal. Canned Response – Pre-defined templates for fast replies. Max Tickets – Limit open tickets per user/agent. Mail Chimp – Sync users to marketing mailing lists. User Options – Advanced registration & Captcha. Ticket Actions – Add power actions like Print, Lock, Ticket In-Progress, and advanced Priority controls. Announcements – Broadcast news to all support users. Downloads – Share supporting files with customers. FAQ – Database of frequently asked questions. Admin Widgets – Real-time stats on WP dashboard. Internal Mail – Agent-to-agent messaging system. Envato Validation – Verify purchase codes for tickets. Front-End Widgets – Display ticket stats in sidebars. Multi Language Emails – Language-based templates. Easy Digital Download – Integrated support for EDD. Privacy & Third-Party Service Disclosure To provide advanced AI functionalities, JS Help Desk integrates with the Zywrap Cloud API (a third-party service). Data Transmission: When an agent actively uses an AI feature (such as “Generate Reply”, “Summarize”, “Extract Details”, or “Translate”), the content of the specific ticket thread and the customer’s message are securely transmitted to the Zywrap API to generate the response. Opt-In Required: The AI Copilot is completely disabled by default. No data is transmitted unless an Administrator explicitly registers for a Zywrap account, inputs their API Key in the settings, and an agent clicks an AI action button. Data Usage: Data sent to the Zywrap API is used strictly for generating the requested AI text in real-time. Please review the Zywrap Privacy Policy for full details on data handling.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C