Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2987▼ 96 respecto a la semana anterior

Críticas / altas1458▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

33 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2024-7094	Aplazada	Crítica (9.8)	38%	💥 PoC	Jshelpdesk JS Help Desk^AI	13/8/2024	17/6/2026	The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to PHP Code Injection leading to Remote Code Execution in all versions up to, and including, 2.8.6 via the 'storeTheme' function. This is due to a lack of sanitization on user-supplied values, which replace values in the…
CVE-2024-31273	Modificada	Crítica (9.8)	0.47%	—	Wiselyhub JS Help Desk	9/6/2024	17/6/2026	Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.3.
CVE-2023-25444	Analizada	Crítica (9.1)	0.84%	—	Joomsky JS Help Desk	17/5/2024	17/6/2026	Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Using Malicious Files.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.7.
CVE-2022-47151	Modificada	Alta (8.6)	0.44%	—	Joomsky JS Help Desk	17/4/2024	17/6/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.
CVE-2022-46839	Modificada	Crítica (9.8)	0.83%	—	Wiselyhub JS Help Desk	5/1/2024	17/6/2026	Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.
CVE-2023-50839	Modificada	Crítica (9.8)	2.0%	💥 Exploit	Wiselyhub JS Help Desk	28/12/2023	17/6/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.1.
CVE-2022-46842	Modificada	Alta (8.8)	0.26%	—	Wiselyhub JS Help Desk	2/2/2023	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in JS Help Desk plugin <= 2.7.1 versions.
CVE-2018-21002	Modificada	Alta (8.8)	0.68%	—	Joomsky JS Help Desk	27/8/2019	17/6/2026	The js-support-ticket plugin before 2.0.6 for WordPress has CSRF.