WordPress JS Help Desk β Best Help Desk & Support Plugin Plugin <= 2.7.1 is vulnerable to Arbitrary File Upload
CVE-2022-46839
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 5 January 2024
What is CVE-2022-46839?
The vulnerability in the JS Help Desk plugin allows for the unrestricted upload of files with dangerous types. This flaw can be exploited by attackers to upload malicious files, potentially leading to unauthorized access or compromise of the server environment. Affected versions from n/a up to 2.7.1 are at risk, emphasizing the need for users to apply the necessary security measures and updates to prevent exploitation. Proper configuration and security protocols are crucial for safeguarding against such vulnerabilities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
JS Help Desk β Best Help Desk & Support Plugin <= 2.7.1
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved