Skip to content
PluginCanary

JS Help Desk

JS Help Desk - AI-Powered Support & Ticketing System
by JoomSky · 7,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 30 Oct 2026, 63 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for JS Help Desk
Ownership100
Maintenance100
Security60
SupportNo data
ReputationNo data

How the score works

Quick answers

Is JS Help Desk still maintained?
Yes. Last release 30 Oct 2026, 63 releases in the last 24 months. 30 Oct 2026 · wordpress.org
Who owns JS Help Desk, and has it changed hands?
No change recorded. Main committer rabilal since Oct 2014. 3 Nov 2026 · SVN log
Was JS Help Desk removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is JS Help Desk safe?
36 known vulnerabilities, all fixed (latest in 5.0.2). Not on the exploited list. 30 Oct 2026 · Wordfence Intelligence
Is the latest JS Help Desk update safe to install?
No ownership change before 5.0.3. No one-star spike after it. 30 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
rabilal10 Oct 2014 to 4 Nov 2026, 373 commits

1 committer recorded. No ownership change since 2014.

Maintenance

Last release
5 days ago
Releases, 24 months
63
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for JS Help Desk
Q1 20241
Q2 202421
Q3 20242
Q4 20241
Q1 20255
Q2 20254
Q3 20252
Q4 20252
Q1 20265
Q2 20267
Q3 202634
Q4 20264

Last release 30 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 3.7.

Rating distribution
5 star45
4 star3
3 star4
2 star4
1 star18

Security record

24 vulnerabilities in 24 months (36 on record), all patched (latest fixed in 5.0.2).

Show 36 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
30 Oct 2026JS Help Desk <= 5.0.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'support_custom_img' Parameter4.9<= 5.0.15.0.2Patched before disclosure
5 Oct 2026JS Help Desk - AI-Powered Support & Ticketing System <= 4.0.0 - Authenticated (Subscriber+) Insecure Direct Object Reference4.3<= 4.0.05.0.0Patched before disclosure
5 Oct 2026JS Help Desk - AI-Powered Support & Ticketing System <= 4.0.0 - Authenticated (Subscriber+) Insecure Direct Object Reference4.3<= 4.0.05.0.0Patched before disclosure
4 Aug 2026JS Help Desk - AI-Powered Support & Ticketing System < 3.1.4 - Authenticated (Subscriber+) Information Exposure4.3< 3.1.43.1.4Patched before disclosure
13 Jul 2026JS Help Desk - AI-Powered Support & Ticketing System < 3.1.4 - Unauthenticated Arbitrary Media Upload5.3< 3.1.43.1.4Patched before disclosure
13 Jul 2026JS Help Desk - AI-Powered Support & Ticketing System <= 3.1.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Cross-User Support Ticket Disclosure4.3<= 3.1.43.1.5Patched before disclosure
13 Jul 2026JS Help Desk <= 3.1.3 - Missing Authorization to Authenticated (Subscriber+) Ticket Reply Modification4.3<= 3.1.33.1.4Patched before disclosure
13 Jul 2026JS Help Desk <= 3.1.3 - Authenticated (Contributor+) User Email Disclosure4.3<= 3.1.33.1.4Patched before disclosure
26 Jun 2026JS Help Desk - AI-Powered Support & Ticketing System <= 3.1.0 - Unauthenticated Insecure Direct Object Reference5.3<= 3.1.03.1.1Patched before disclosure
25 Jun 2026JS Help Desk - AI-Powered Support & Ticketing System <= 3.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion8.8<= 3.1.13.1.2Patched before disclosure
2 Jun 2026JS Help Desk - AI-Powered Support & Ticketing System <= 3.0.9 - Unauthenticated SQL Injection7.5<= 3.0.93.1.0Patched before disclosure
2 Jun 2026JS Help Desk - AI-Powered Support & Ticketing System <= 3.0.9 - Missing Authorization5.3<= 3.0.93.1.0Patched before disclosure
25 Mar 2026JS Help Desk - AI-Powered Support & Ticketing System <= 3.0.4 - Unauthenticated SQL Injection via 'multiformid' Parameter7.5<= 3.0.43.0.5Patched before disclosure
23 Mar 2026JS Help Desk - AI-Powered Support & Ticketing System <= 3.0.3 - Authenticated (Subscriber+) Insecure Direct Object Reference4.3<= 3.0.33.0.4Patched before disclosure
20 Mar 2026JS Help Desk - AI-Powered Support & Ticketing System <= 3.0.3 - Authenticated (Subscriber+) SQL Injection6.5<= 3.0.33.0.4Patched before disclosure
3 Mar 2026JS Help Desk - AI-Powered Support & Ticketing System 2.8.2 - Unauthenticated SQL Injection via 'js-support-ticket-token-tkstatus' Cookie7.5<= 2.8.22.8.3Patched before disclosure
11 Feb 2026JS Help Desk <= 3.0.1 - Authenticated (Subscriber+) SQL Injection6.5<= 3.0.13.0.2Patched before disclosure
27 Mar 2025JS Help Desk <= 2.9.2 - Missing Authorization5.3<= 2.9.22.9.3Patched before disclosure
27 Mar 2025JS Help Desk <= 2.9.2 - Unauthenticated Arbitrary File Deletion9.1<= 2.9.22.9.3Patched before disclosure
27 Mar 2025JS Help Desk <= 2.9.1 - Unauthenticated Arbitrary File Download7.5<= 2.9.12.9.2Patched before disclosure
27 Mar 2025JS Help Desk <= 2.9.2 - Unauthenticated Local File Inclusion9.8<= 2.9.22.9.3Patched before disclosure
27 Mar 2025JS Help Desk <= 2.9.2 - Unauthenticated SQL Injection7.5<= 2.9.22.9.3Patched before disclosure
12 Feb 2025JS Help Desk - The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory7.5<= 2.8.82.8.9Patched before disclosure
3 Feb 2025JS Help Desk - The Ultimate Help Desk & Support Plugin <= 2.8.8 - Authenticated (Subscriber+) Insecure Direct Object Reference4.3<= 2.8.82.8.9Patched before disclosure
1 Nov 2024JS Help Desk - Best Help Desk & Support Plugin <= 2.8.7 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 2.8.72.8.8Patched before disclosure

Changelog mentions of security fixes: 5.0.2 (security); 5.0.3 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

7,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for JS Help Desk
4 May 2026421
11 May 202610,841
18 May 202610,890
25 May 2026725
1 Jun 202610,935
8 Jun 2026799
15 Jun 202610,940
22 Jun 202610,863
29 Jun 2026731
6 Jul 202620,469
13 Jul 20261,374
20 Jul 202610,664
27 Jul 20261,051
3 Aug 2026929
10 Aug 202611,101
17 Aug 2026836
24 Aug 2026814
31 Aug 2026949
7 Sep 202611,143
14 Sep 20261,093
21 Sep 20261,167
28 Sep 202611,402
5 Oct 202611,231
12 Oct 20261,005
19 Oct 202611,311
26 Oct 202611,430
2 Nov 2026158

Weekly downloads over the last 4 weeks are 2% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version5.0.3
AuthorJoomSky
Added10 Oct 2014
Last updated30 Oct 2026
Active installs7,000+
Requires WordPress5.5
Tested up to7.1.4
Requires PHP7.4
CategorySupport & Help Desk > Help Desk & Ticketing Systems
Tagshelpdesk, knowledge base, Support Ticket, customer support, ticketing system

Other plugins by this author: JS Job Manager

Questions

Is JS Help Desk still maintained?

Yes. Last release 30 Oct 2026, 63 releases in the last 24 months.

Who owns JS Help Desk, and has it changed hands?

No change recorded. Main committer rabilal since Oct 2014.

Was JS Help Desk removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is JS Help Desk safe?

36 known vulnerabilities, all fixed (latest in 5.0.2). Not on the exploited list.

Is the latest JS Help Desk update safe to install?

No ownership change before 5.0.3. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue