CVE-2022-46839 - WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.1 is vulnerable to Arbitrary File Upload

Back Back to CVE browser

CRITICAL

WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.1 is vulnerable to Arbitrary File Upload

Published Jan 5, 2024

10.0

CRITICAL

CVSS 3.1

EPSS 0.83%

Description

Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1.

Affected products

Vendor JS Help Desk Product JS Help Desk – Best Help Desk & Support Plugin Default
unaffected
Affected
- ≤ 2.7.1

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
JS Help Desk	JS Help Desk – Best Help Desk & Support Plugin	unaffected	Affected ≤ 2.7.1

Remediation

Vendor solution

Update to 2.7.2 or a higher version.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-49620
Advisory
https://patchstack.com/database/vulnerability/js-support-ticket/wordpress-js-help-desk-plugin-2-7-1-arbitrary-file-upload-vulnerability?_s_id=cve
vdb-entryThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-49620		Advisory
https://patchstack.com/database/vulnerability/js-support-ticket/wordpress-js-help-desk-plugin-2-7-1-arbitrary-file-upload-vulnerability?_s_id=cve		vdb-entryThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Patchstack

Published Jan 5, 2024

Updated Apr 28, 2026

Reserved Dec 9, 2022

Link CVE-2022-46839

CISA Vulnrichment

Updated Jan 9, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-46839

Red Hat

No data

ENISA EUVD

Assigner Patchstack

Published Jan 5, 2024

Updated Apr 28, 2026

Link EUVD-2022-49620

GitHub

No data