WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in JS Help Desk – AI-Powered Support & Ticketing System

Professional, beautiful, complete and powerful help desk & support system for WordPress.

33Reported vulnerabilities
9.8Highest CVSS score
3.1.7Latest version
7,000+Active installs

What to do now

Update JS Help Desk – AI-Powered Support & Ticketing System to 3.1.4 or later. 33 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 10, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2024-7094 Critical 9.8 37.6% 0 to 2.8.6 (inclusive)
0 to 2.8.6 (inclusive)		 2.8.7 August 13, 2024
CVE-2023-50839 Critical 9.8 2.0% Before 2.8.2 2.8.2 December 21, 2023
CVE-2025-30901 Critical 9.8 0.9% 2.9.2 and earlier 2.9.3 March 27, 2025
CVE-2022-46839 Critical 9.8 0.8% 2.7.1 and earlier 2.7.2 January 27, 2023
CVE-2025-30878 Critical 9.1 0.6% 2.9.2 and earlier 2.9.3 March 27, 2025
CVE-2022-46838 Critical 9.1 0.7% 2.7.1 to 2.7.1 (inclusive) 2.7.2 January 27, 2023
CVE-2026-56054 High 8.8 0.5% 3.1.1 and earlier 3.1.2 June 25, 2026
CVE-2018-21002 High 8.8 0.7% Before 2.0.6 2.0.6 August 27, 2019
CVE-2022-47151 High 8.6 0.4% 2.7.1 and earlier 2.7.2 January 27, 2023
CVE-2023-7337 High 7.5 1.3% 2.8.2 and earlier 2.8.3 March 3, 2026
CVE-2025-30886 High 7.5 0.5% 2.9.2 and earlier 2.9.3 March 27, 2025
CVE-2025-30882 High 7.5 0.6% 2.9.1 and earlier 2.9.2 March 27, 2025
CVE-2026-48886 High 7.5 0.3% 3.0.9 and earlier 3.1.0 June 2, 2026
CVE-2026-2511 High 7.5 0.3% 0 to 3.0.4 (inclusive) 3.0.5 March 26, 2026
CVE-2024-13606 High 7.5 0.4% Before 2.8.9 2.8.9 February 13, 2025
CVE-2023-25444 High 7.2 0.8% 2.7.7 and earlier 2.7.8 August 17, 2023
CVE-2026-32534 Medium 6.5 0.2% 3.0.3 and earlier 3.0.4 March 20, 2026
CVE-2026-24959 Medium 6.5 0.2% 3.0.1 and earlier 3.0.2 February 11, 2026
CVE-2023-23679 Medium 6.3 0.5% 2.7.7 and earlier 2.7.8 June 20, 2023
CVE-2022-46840 Medium 6.3 0.4% 2.7.1 and earlier 2.7.2 January 27, 2023
CVE-2022-46842 Medium 5.4 0.3% 2.7.1 and earlier 2.7.2 January 27, 2023
CVE-2026-14930 Medium 5.3 0.2% Before 3.1.4 3.1.4 July 13, 2026
CVE-2026-57652 Medium 5.3 0.3% 3.1.0 and earlier 3.1.1 June 26, 2026
CVE-2026-48887 Medium 5.3 0.2% 3.0.9 and earlier 3.1.0 June 2, 2026
CVE-2025-30880 Medium 5.3 0.5% 2.9.2 and earlier 2.9.3 March 27, 2025
CVE-2024-31273 Medium 5.3 0.5% 2.8.3 and earlier 2.8.4 April 5, 2024
CVE-2024-51670 Medium 4.4 0.3% 2.8.7 and earlier 2.8.8 November 1, 2024
CVE-2026-14928 Medium 4.3 0.2% Before 3.1.4 3.1.4 August 4, 2026
CVE-2026-15209 Medium 4.3 0.2% 3.1.4 and earlier 3.1.5 July 13, 2026
CVE-2026-14929 Medium 4.3 0.2% 3.1.3 and earlier 3.1.4 July 13, 2026
CVE-2026-14931 Medium 4.3 0.2% 3.1.3 and earlier 3.1.4 July 13, 2026
CVE-2026-32535 Medium 4.3 0.2% 3.0.3 and earlier 3.0.4 March 23, 2026
CVE-2024-13607 Medium 4.3 0.4% 0 to 2.8.8 (inclusive) 2.8.9 February 4, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.