PT-2026-139405
CVE-2026-119513
·
Published
2026-11-07
·
Updated
2026-11-07
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
JS Help Desk versions prior to 5.0.4
Description
Incorrectly configured access control security levels in the JS Help Desk plugin for WordPress allow for unauthorized access. This issue stems from a missing capability check within a function, enabling unauthenticated attackers to perform unauthorized actions.
Recommendations
Update to a version newer than 5.0.3.
Found an issue in the description? Have something to add? Feel free to write us 👾