rabilal vulnerabilities
8 published CVEs name rabilal among the affected products.
- 8Published CVEs8 of them scored
- 5Last 12 monthspublished in the last year
- 2Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-118046
JS Help Desk <= 5.0.2 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via 'jsticket_message' Ticket Field via VenoBox data-title
rabilal · JS Help Desk – AI-Powered Support & Ticketing System
Medium6.4 - CVE-2026-104739
JS Help Desk <= 5.0.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'support_custom_img' Parameter
rabilal · JS Help Desk – AI-Powered Support & Ticketing System
Medium4.9 - CVE-2026-12153
WP Learn Manager <= 1.1.8 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation and Activation via jslearnmanager_ajax AJAX Action
rabilal · WP Learn Manager
Critical9.8 - CVE-2026-2511
JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.4 - Unauthenticated SQL Injection via 'multiformid' Parameter
rabilal · JS Help Desk – AI-Powered Support & Ticketing System
High7.5 - CVE-2023-7337
JS Help Desk – AI-Powered Support & Ticketing System 2.8.2 - Unauthenticated SQL Injection via 'js-support-ticket-token-tkstatus' Cookie
rabilal · JS Help Desk – AI-Powered Support & Ticketing System
High7.5 - CVE-2024-13606
JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
rabilal · JS Help Desk – AI-Powered Support & Ticketing System
High7.5 - CVE-2024-13607
JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Authenticated (Subscriber+) Insecure Direct Object Reference
rabilal · JS Help Desk – AI-Powered Support & Ticketing System
Medium4.3 - CVE-2024-7094
JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.6 - Unauthenticated PHP Code Injection to Remote Code Execution
rabilal · JS Help Desk – AI-Powered Support & Ticketing System
Critical9.8