Joomsky vulnerabilities
25 CVEs and advisories name Joomsky as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-57652WordPress JS Help Desk plugin <= 3.1.0 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2019-25740Joomla com_jsjobs 1.2.6 Arbitrary File Deletion
- CVE-2018-25327Joomla! Component Js Jobs 1.2.0 Cross-Site Request Forgery
- CVE-2020-37226Joomla J2 JOBS 1.3.0 Authenticated SQL Injection via sortby
- CVE-2020-37224Joomla J2 JOBS 1.3.0 Authenticated SQL Injection via sortby
- CVE-2026-32535WordPress JS Help Desk plugin <= 3.0.3 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2026-32534WordPress JS Help Desk plugin <= 3.0.3 - SQL Injection vulnerability
- CVE-2026-24959WordPress JS Help Desk plugin <= 3.0.1 - SQL Injection vulnerability
- CVE-2025-58234WordPress JS Job Manager Plugin <= 2.0.2 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-32626WordPress JS Job Manager plugin <= 2.0.2 - SQL Injection vulnerability
- CVE-2025-32660WordPress JS Job Manager plugin <= 2.0.2 - Arbitrary File Upload vulnerability
- CVE-2025-32627WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability
- CVE-2025-32146WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability
- CVE-2025-31868WordPress JS Job Manager plugin <= 2.0.2 - Broken Access Control vulnerability
- CVE-2025-31867WordPress JS Job Manager Plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2025-30901WordPress JS Help Desk plugin <= 2.9.2 - Local File Inclusion vulnerability
- CVE-2025-30886WordPress JS Help Desk plugin <= 2.9.2 - SQL Injection vulnerability
- CVE-2025-30882WordPress JS Help Desk plugin <= 2.9.1 - Arbitrary File Download vulnerability
- CVE-2025-30880WordPress JS Help Desk plugin <= 2.9.2 - Broken Access Control vulnerability
- CVE-2025-30878WordPress JS Help Desk plugin <= 2.9.2 - Arbitrary File Deletion vulnerability
- CVE-2025-25109WordPress Vehicle Manager plugin <= 3.1 - Local File Inclusion vulnerability
- CVE-2023-28689WordPress JS Job Manager plugin <= 2.0.0 - Broken Access Control vulnerability
- CVE-2024-51670WordPress JS Help Desk plugin <= 2.8.7 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2023-31087WordPress JS Job Manager Plugin <=2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-25963WordPress JS Job Manager Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)