Skip to content
Threat Feed
Subscribe

Vendor

JS Help Desk

1 brief RSS
high advisory

JS Help Desk WordPress Plugin Vulnerable to SQL Injection (CVE-2026-2511)

The JS Help Desk WordPress plugin versions 3.0.4 and earlier are vulnerable to SQL injection via the `multiformid` parameter in the `storeTickets()` function, allowing unauthenticated attackers to extract sensitive information from the database.

JS Help Desk – AI-Powered Support & Ticketing System wordpress sql-injection plugin
2r 1t