Threat database

20 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.3	EPSS 0.3%	CVE-2026-57652JS Help Desk (WordPress plugin) · Insecure Direct Object Reference Medium5.3EPSS 0.3%2026-06-26CVE Database V5CVE-2026-57652 Unauthenticated Insecure Direct Object References (IDOR) in JS Help Desk <= 3.1.0 versions. EPSS 0.3%Vulnerability JoomSky CWE-639	CVE Database V5	2026-06-26
Medium	6.5	EPSS 0.2%	CVE-2026-32535JS Help Desk (WordPress plugin) · Insecure Direct Object Reference Medium6.5EPSS 0.2%2026-03-25CVE Database V5CVE-2026-32535 Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through <= 3.0.3. EPSS 0.2%Vulnerability JoomSky	CVE Database V5	2026-03-25
High	8.5	EPSS 0.2%	CVE-2026-32534JS Help Desk (WordPress plugin) · SQL Injection High8.5EPSS 0.2%2026-03-25CVE Database V5CVE-2026-32534 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help Desk js-support-ticket allows Blind SQL Injection.This issue affects JS Help Desk: from n/a through <= 3.0.3. EPSS 0.2%Vulnerability JoomSky	CVE Database V5	2026-03-25
High	8.5	EPSS 0.3%	CVE-2026-24959JS Help Desk (WordPress plugin) · SQL Injection High8.5EPSS 0.3%2026-02-20CVE Database V5CVE-2026-24959 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help Desk js-support-ticket allows Blind SQL Injection.This issue affects JS Help Desk: from n/a through <= 3.0.1. EPSS 0.3%Vulnerability JoomSky	CVE Database V5	2026-02-20
Medium	6.5	EPSS 0.2%	CVE-2025-58234JS Job Manager (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-09-22CVE Database V5CVE-2025-58234 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Job Manager js-jobs allows Stored XSS.This issue affects JS Job Manager: from n/a through <= 2.0.2. EPSS 0.2%Vulnerability JoomSky	CVE Database V5	2025-09-22
High	8.7	EPSS 0.3%	CVE-2025-54475joomsky.com JS Jobs component for Joomla · SQL Injection High8.7EPSS 0.3%2025-08-15CVE Database V5CVE-2025-54475 A SQL injection vulnerability in the JS Jobs plugin versions 1.3.2-1.4.4 for Joomla allows low-privilege users to execute arbitrary SQL commands. EPSS 0.3%Vulnerability CWE-89	CVE Database V5	2025-08-15
High	8.7	EPSS 4.9%	CVE-2025-49484joomsky.com JS Jobs component for Joomla · SQL Injection High8.7EPSS 4.9%2025-07-18CVE Database V5CVE-2025-49484 A SQL injection vulnerability in the JS Jobs plugin versions 1.0.0-1.4.1 for Joomla allows low-privilege users to execute arbitrary SQL commands via the 'cvid' parameter in the employee application feature. EPSS 4.9%Vulnerability CWE-89	CVE Database V5	2025-07-18
Critical	9.3	EPSS 0.5%	CVE-2025-32626JS Job Manager (WordPress plugin) · SQL Injection Critical9.3EPSS 0.5%2025-04-17CVE Database V5CVE-2025-32626 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Job Manager js-jobs allows SQL Injection.This issue affects JS Job Manager: from n/a through <= 2.0.2. EPSS 0.5%Vulnerability JoomSky	CVE Database V5	2025-04-17
Critical	10.0	EPSS 0.5%	CVE-2025-32660JS Job Manager (WordPress plugin) · Unrestricted File Upload Critical10.0EPSS 0.5%2025-04-17CVE Database V5CVE-2025-32660 Unrestricted Upload of File with Dangerous Type vulnerability in JoomSky JS Job Manager js-jobs allows Upload a Web Shell to a Web Server.This issue affects JS Job Manager: from n/a through <= 2.0.2. EPSS 0.5%Vulnerability JoomSky	CVE Database V5	2025-04-17
High	8.1	EPSS 1.0%	CVE-2025-32627JS Job Manager (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 1.0%2025-04-11CVE Database V5CVE-2025-32627 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager js-jobs allows PHP Local File Inclusion.This issue affects JS Job Manager: from n/a through <= 2.0.2. EPSS 1.0%Vulnerability JoomSky	CVE Database V5	2025-04-11
High	8.8	EPSS 0.8%	CVE-2025-32146JS Job Manager (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.8EPSS 0.8%2025-04-04CVE Database V5CVE-2025-32146 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager js-jobs allows PHP Local File Inclusion.This issue affects JS Job Manager: from n/a through <= 2.0.2. EPSS 0.8%Vulnerability JoomSky	CVE Database V5	2025-04-04
Medium	5.3	EPSS 0.3%	CVE-2025-31868JS Job Manager (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.3%2025-04-01CVE Database V5CVE-2025-31868 Missing Authorization vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through <= 2.0.2. EPSS 0.3%Vulnerability JoomSky	CVE Database V5	2025-04-01
Medium	5.4	EPSS 0.4%	CVE-2025-31867JS Job Manager (WordPress plugin) · Insecure Direct Object Reference Medium5.4EPSS 0.4%2025-04-01CVE Database V5CVE-2025-31867 Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through <= 2.0.2. EPSS 0.4%Vulnerability JoomSky	CVE Database V5	2025-04-01
High	8.1	EPSS 0.9%	CVE-2025-30901JS Help Desk (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.9%2025-04-01CVE Database V5CVE-2025-30901 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Help Desk js-support-ticket allows PHP Local File Inclusion.This issue affects JS Help Desk: from n/a through <= 2.9.2. EPSS 0.9%Vulnerability JoomSky	CVE Database V5	2025-04-01
Critical	9.3	EPSS 0.5%	CVE-2025-30886JS Help Desk (WordPress plugin) · SQL Injection Critical9.3EPSS 0.5%2025-04-01CVE Database V5CVE-2025-30886 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help Desk js-support-ticket allows SQL Injection.This issue affects JS Help Desk: from n/a through <= 2.9.2. EPSS 0.5%Vulnerability JoomSky	CVE Database V5	2025-04-01
High	7.5	EPSS 0.6%	CVE-2025-30882JS Help Desk (WordPress plugin) · Path Traversal High7.5EPSS 0.6%2025-04-01CVE Database V5CVE-2025-30882 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk js-support-ticket allows Path Traversal.This issue affects JS Help Desk: from n/a through <= 2.9.1. EPSS 0.6%Vulnerability JoomSky	CVE Database V5	2025-04-01
High	7.5	EPSS 0.5%	CVE-2025-30880JS Help Desk (WordPress plugin) · Missing Authorization High7.5EPSS 0.5%2025-04-01CVE Database V5CVE-2025-30880 Missing Authorization vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through <= 2.9.2. EPSS 0.5%Vulnerability JoomSky	CVE Database V5	2025-04-01
High	8.6	EPSS 0.6%	CVE-2025-30878JS Help Desk (WordPress plugin) · Path Traversal High8.6EPSS 0.6%2025-04-01CVE Database V5CVE-2025-30878 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk js-support-ticket allows Path Traversal.This issue affects JS Help Desk: from n/a through <= 2.9.2. EPSS 0.6%Vulnerability JoomSky	CVE Database V5	2025-04-01
High	8.1	EPSS 0.8%	CVE-2025-25109JoomSky WP Vehicle Manager · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.8%2025-03-03CVE Database V5CVE-2025-25109 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky WP Vehicle Manager js-vehicle-manager allows PHP Local File Inclusion.This issue affects WP Vehicle Manager: from n/a through <= 3.1. EPSS 0.8%Vulnerability	CVE Database V5	2025-03-03
Medium	5.9	EPSS 0.3%	CVE-2024-51670JS Help Desk (WordPress plugin) · Cross-site Scripting Medium5.9EPSS 0.3%2024-11-09CVE Database V5CVE-2024-51670 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomSky JS Help Desk js-support-ticket allows Stored XSS.This issue affects JS Help Desk: from n/a through <= 2.8.7. EPSS 0.3%Vulnerability JoomSky	CVE Database V5	2024-11-09

Page 1 of 1