JoomSky

Products

ProductCVEsExploitedLatest
JS Help Desk10–Jun 26, 2026
JS Job Manager10–Sep 22, 2025
J2 JOBS2–May 13, 2026
WP Vehicle Manager1–Mar 3, 2025

Exploited and recent CVEs

  • CVE-2026-57652 Medium 5.3 WordPress JS Help Desk plugin <= 3.1.0 - Insecure Direct Object References (IDOR) vulnerability 0.3%
  • CVE-2020-37226 High 7.1 Joomla J2 JOBS 1.3.0 Authenticated SQL Injection via sortby 0.3%
  • CVE-2020-37224 High 7.1 Joomla J2 JOBS 1.3.0 Authenticated SQL Injection via sortby 0.3%
  • CVE-2026-32535 Medium 6.5 WordPress JS Help Desk plugin <= 3.0.3 - Insecure Direct Object References (IDOR) vulnerability 0.2%
  • CVE-2026-32534 High 8.5 WordPress JS Help Desk plugin <= 3.0.3 - SQL Injection vulnerability 0.2%
  • CVE-2026-24959 High 8.5 WordPress JS Help Desk plugin <= 3.0.1 - SQL Injection vulnerability 0.3%
  • CVE-2025-58234 Medium 6.5 WordPress JS Job Manager Plugin <= 2.0.2 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-32626 Critical 9.3 WordPress JS Job Manager plugin <= 2.0.2 - SQL Injection vulnerability 0.5%
  • CVE-2025-32660 Critical 10.0 WordPress JS Job Manager plugin <= 2.0.2 - Arbitrary File Upload vulnerability 0.5%
  • CVE-2025-32627 High 8.1 WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability 1.0%
  • CVE-2025-32146 High 8.8 WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability 0.8%
  • CVE-2025-31868 Medium 5.3 WordPress JS Job Manager plugin <= 2.0.2 - Broken Access Control vulnerability 0.3%
  • CVE-2025-31867 Medium 5.4 WordPress JS Job Manager Plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability 0.4%
  • CVE-2025-30901 High 8.1 WordPress JS Help Desk plugin <= 2.9.2 - Local File Inclusion vulnerability 0.9%
  • CVE-2025-30886 Critical 9.3 WordPress JS Help Desk plugin <= 2.9.2 - SQL Injection vulnerability 0.5%
  • CVE-2025-30882 High 7.5 WordPress JS Help Desk plugin <= 2.9.1 - Arbitrary File Download vulnerability 0.6%
  • CVE-2025-30880 High 7.5 WordPress JS Help Desk plugin <= 2.9.2 - Broken Access Control vulnerability 0.5%
  • CVE-2025-30878 High 8.6 WordPress JS Help Desk plugin <= 2.9.2 - Arbitrary File Deletion vulnerability 0.6%
  • CVE-2025-25109 High 8.1 WordPress Vehicle Manager plugin <= 3.1 - Local File Inclusion vulnerability 0.8%
  • CVE-2023-28689 Medium 6.5 WordPress JS Job Manager plugin <= 2.0.0 - Broken Access Control vulnerability 0.5%
  • CVE-2024-51670 Medium 5.9 WordPress JS Help Desk plugin <= 2.8.7 - Stored Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-31087 Medium 5.4 WordPress JS Job Manager Plugin <=2.0.0 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-25963 Medium 5.9 WordPress JS Job Manager Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS) 0.4%