Skip to content
Rabilal vulnerabilities
Newest
-
rabilal js help desk – ai-powered support & ticketing system
JS Help Desk <= 5.0.2 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via 'jsticket_message' Ticket Field via VenoBox data-title
CVE-2026-118046
6.4 Medium
-
rabilal js help desk – ai-powered support & ticketing system
JS Help Desk <= 5.0.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'support_custom_img' Parameter
CVE-2026-104739
4.9 Medium
-
rabilal wp learn manager
WP Learn Manager <= 1.1.8 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation and Activation via jslearnmanager_ajax AJAX Action
CVE-2026-12153
9.8 Critical
-
rabilal js help desk – ai-powered support & ticketing system
JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.4 - Unauthenticated SQL Injection via 'multiformid' Parameter
CVE-2026-2511
7.5 High
-
rabilal js help desk – ai-powered support & ticketing system
JS Help Desk – AI-Powered Support & Ticketing System 2.8.2 - Unauthenticated SQL Injection via 'js-support-ticket-token-tkstatus' Cookie
CVE-2023-7337
7.5 High
-
wiselyhub js help desk, rabilal js help desk – ai-powered support & ticketing system +1 more
JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
CVE-2024-13606
7.5 High
-
rabilal js help desk – ai-powered support & ticketing system
JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Authenticated (Subscriber+) Insecure Direct Object Reference
CVE-2024-13607
4.3 Medium
-
wiselyhub js help desk, rabilal js help desk – ai-powered support & ticketing system +1 more
JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.6 - Unauthenticated PHP Code Injection to Remote Code Execution
CVE-2024-7094
Public exploit
EPSS 37.6%
9.8 Critical