These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-103079 is an Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket. The issue allows Exploiting Incorrectly Configured Access Control Security Levels and affects JS Help Desk from n/a through 4.0.0. This vulnerability has a medium severity and requires immediate attention from defenders responsible for JS Help Desk installations. The CVE record and [truncated]
CVE-2026-103078 is an Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket. The issue allows Exploiting Incorrectly Configured Access Control Security Levels and affects JS Help Desk from n/a through 4.0.0. This vulnerability has a MEDIUM severity with a CVSS score of 4.3. Defenders should assess the vulnerability's presence in their inventory and prioriti [truncated]
CVE-2026-56054 is a HIGH severity vulnerability in JS Help Desk plugin versions <= 3.1.1, allowing subscribers to delete arbitrary files. The CVE record was published on 2026-06-25T14:16:51.283Z and has not been modified since then. The NVD entry is currently Deferred.
CVE-2026-48887 is a MEDIUM severity vulnerability (CVSS score 6.5) in the JS Help Desk plugin versions <= 3.0.9. The vulnerability is caused by unauthenticated broken access control. According to [ref-4](https://patchstack.com/database/wordpress/plugin/js-support-ticket/vulnerability/wordpress-js-help-desk-plugin-3-0-9-broken-access-control-vulnerability?_s_id=cve), the issue was reported by audit@patchst [truncated]
CVE-2026-48886 is a critical vulnerability in the JS Help Desk plugin for WordPress, affecting versions up to and including 3.0.9. This vulnerability allows for unauthenticated SQL injection, which can lead to severe consequences, including unauthorized access to sensitive data. The Common Vulnerability Scoring System (CVSS) score for this vulnerability is 9.3, indicating a critical severity level. The vu [truncated]
A Cross Site Scripting (XSS) vulnerability exists in WP Job Portal plugin versions up to 2.5.2. This CVE was published on 2026-06-15T21:17:17.257Z and last modified on 2026-10-25T23:10:00.167Z.
CVE-2026-40772 is a critical vulnerability (CVSS Score: 10) in the GeekyBot plugin versions <= 1.2.2. This vulnerability allows unauthenticated arbitrary file uploads, posing a significant risk to affected systems.
CVE-2026-39519 is a critical unauthenticated SQL injection vulnerability in the GeekyBot plugin versions <= 1.2.0. The vulnerability has a CVSS score of 9.3 and was published on [cvePublishedAt](https://www.cve.org/CVERecord?id=CVE-2026-39519). The CVE record can be found at [cve-org](https://www.cve.org/CVERecord?id=CVE-2026-39519).