Unauthenticated Access Control Vulnerability in JS Help Desk by WordPress
CVE-2026-48887

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Js Help Desk
Vendor
CVE Published:
15 June 2026

What is CVE-2026-48887?

The vulnerability in JS Help Desk up to version 3.0.9 allows unauthenticated users to exploit broken access control mechanisms. This situation can lead to unauthorized actions within the application, significantly compromising user data and application integrity. It is crucial for users to apply necessary patches to safeguard their systems against potential security risks.

Affected Version(s)

JS Help Desk <= 3.0.9

References

https://patchstack.com/database/wordpress/plugin/js-suppo...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nvz | Patchstack Bug Bounty Program
.