Support Helpdesk Ticket System Lite
Support Helpdesk Ticket System Lite has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of October 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Support Helpdesk Ticket System Lite has a vendor fix available, so running the current release closes it.
All of these findings were reported by thiennv. Support Helpdesk Ticket System Lite is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2025-31626Support Helpdesk Ticket System Lite <= 4.5.2 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records

Support Helpdesk Ticket System Lite
Author
M. Ali Saleem
Host a complete helpdesk and support ticket system on your WordPress site. Multi Helpdesk lets companies join your site and run their own support desks – each with its own branding, agents, customers and ticket queue. General Modern React powered helpdesk front-end (single page app) Fully responsive on desktop, tablet and mobile Unlimited companies / helpdesks on one WordPress install Optional company subdomains 6 colour theme presets (Default, Ocean, Forest, Sunset, Royal, Slate) Changeable helpdesk name and front-end URL slug Usage documentation Developer documentation (REST API) Extendable with hooks and filters Optional legacy PHP themes (Blue-Line, Core-UI, Style) Ticketing Ticket statuses: Opened / Closed Action statuses: Un-Answered / Answered / Solved Assign tickets to agents Departments per ticket Search, status filters and pagination Bulk delete 1 to 5 star customer ratings File attachments on tickets Company Admin Create unlimited helpdesks Configure the support homepage (introduction and FAQ, HTML allowed) Configure departments Configure extra notification recipients Configure tickets per page Add and remove agents by email View, block and unblock customers (with reason) Reply to tickets and assign them to agents Set ticket status and action status Per-company custom CSS and JavaScript 12 editable email notification templates with short tags Full company settings panel Admin Panel Demo Public and Customer Public ticket submission (guest or logged in) Company introduction and FAQ accordion on the ticket form Self registration and login Customer dashboard with ticket statistics My Tickets list with search, status filters and pagination Ticket detail with the full conversation thread Solve and rate resolved tickets Profile management (display name and password) Customer Panel Demo Agent Agent dashboard Reply to and close tickets View and manage customers Profile management Dashboards and Statistics Admin dashboard with total, new, opened, closed, un-answered, answered, solved and rated counters Unassigned ticket counter Recent tickets list Agent and customer totals Per-agent ticket statistics Limits and Access Control Optional limits for helpdesks per user, and tickets, agents and customers per helpdesk (0 = unlimited) Admin Only Creation mode – restrict helpdesk creation to WordPress administrators Role based access: WordPress administrator, company admin, agent, customer, guest Cookie and nonce REST authentication Per-company data isolation Coming Soon – Pro Upgrade The Pro upgrade is in active development. It will unlock: Notifications – SMS, WhatsApp, Slack, Microsoft Teams, Telegram, Discord, web push and premium email delivery (SendGrid, Mailgun, Amazon SES, Postmark) Branded HTML emails and fully editable notification templates Automation – escalation alerts, auto-close for stale tickets, follow-up reminders and daily or weekly digests Knowledge base – per-company articles, categories, search, suggested articles and helpful voting Chatbots – a no-code FAQ chatbot builder plus an AI chatbot trained on your knowledge base AI assistant – automatic triage, reply suggestions, conversation summaries, sentiment detection, translation and duplicate detection Integrations – WooCommerce, Easy Digital Downloads, Zapier, CRM sync and issue trackers Reporting – advanced ticket and agent reports, CSAT surveys and scheduled exports Upgrading preserves all existing tickets, customers, agents and settings. Get Pro
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C