JS Help Desk – AI-Powered Support & Ticketing System

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 76% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. A declining trend compresses what a buyer would pay.

1. ★★★★★ anacapaviewestates

   2mo ago

   The system is very buggy, I don’t want to spend time recoding and i won’t buy another level if the free version doesn’t work correctly; submit button on front end doesn’t work correctly.

   Read on wp.org ↗
2. ★★★★★ mary1991

   1.0y ago

   Awesome plugin , does what its says and more

   Read on wp.org ↗
3. ★★★★★ Oooh Boi

   1.2y ago

   Functionality-wise this plugin is really solid. However, when it comes to re-styling… my dear lord, I have never seen such a badly written CSS in my 25 years of developer career. It just can’t be any worse; chained classes, use of important clause, no flexbox or grid, form elements styled up per form, redundancy, overwriting… the worst of all: there’s no way to disable default stylesheet. Whoever did this is an absolute amateur. In the era of AI, is it really that hard to prompt for a stylesheet optimization? If the PRO version utilises identical CSS I’d ask for a refund within 2 minutes.

   Read on wp.org ↗
4. ★★★★★ chrisbg

   1.4y ago

   Great Plugin!

   Read on wp.org ↗
5. ★★★★★ chandlertill

   1.6y ago

   We used both versions free and professional for years

   Read on wp.org ↗
6. ★★★★★ geraldroy

   1.7y ago

   Lots of features, easy to use. Best ever plugin for support.

   Read on wp.org ↗
7. ★★★★★ luisdiego9

   1.7y ago

   Amazing plugin. Keep it up!

   Read on wp.org ↗
8. ★★★★★ erictyl

   1.8y ago

   Easy to use. There is a lot of value in the free version and even more in the other plugin paid version.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.1.5 Security Updated. 3.1.5
2. — Version 3.1.4 Security Updated. 3.1.4
3. — Version 3.1.3 Added Auto Cleanup add-on for automated attachment and ticket deletion, complete with server performance controls, dedicated settings, and UI indicators. Improved System Errors log with detailed execution traces, databas 3.1.3
4. — Version 3.1.2 Security update. 3.1.2
5. — Version 3.1.1 Security update. 3.1.1
6. — Version 3.1.0 Security Fix: Implemented strict authorization and nonce verifications to prevent unauthorized access to ticket actions and attachment downloads. 3.1.0

33 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.3 JS Help Desk – AI-Powered Support & Ticketing System < 3.1.4 - Authenticated (Subscriber+) Information Exposure ↗
   2026-08-04 CVE-2026-14928 Exposure of Sensitive Information to an Unauthorized Actor Affects < 3.1.4 Patched in 3.1.4
2. Medium · 5.3 JS Help Desk – AI-Powered Support & Ticketing System < 3.1.4 - Unauthenticated Arbitrary Media Upload ↗
   2026-07-13 CVE-2026-14930 Missing Authorization Affects < 3.1.4 Patched in 3.1.4
3. Medium · 4.3 JS Help Desk – AI-Powered Support & Ticketing System <= 3.1.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Cross-User Support Ticket Disclosure ↗
   2026-07-13 CVE-2026-15209 Authorization Bypass Through User-Controlled Key Affects <= 3.1.4 Patched in 3.1.5
4. Medium · 4.3 JS Help Desk <= 3.1.3 - Missing Authorization to Authenticated (Subscriber+) Ticket Reply Modification ↗
   2026-07-13 CVE-2026-14929 Incorrect Authorization Affects <= 3.1.3 Patched in 3.1.4
5. Medium · 4.3 JS Help Desk <= 3.1.3 - Authenticated (Contributor+) User Email Disclosure ↗
   2026-07-13 CVE-2026-14931 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 3.1.3 Patched in 3.1.4
6. Medium · 5.3 JS Help Desk – AI-Powered Support & Ticketing System <= 3.1.0 - Unauthenticated Insecure Direct Object Reference ↗
   2026-06-26 CVE-2026-57652 Authorization Bypass Through User-Controlled Key Affects <= 3.1.0 Patched in 3.1.1
7. High · 8.8 JS Help Desk – AI-Powered Support & Ticketing System <= 3.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion ↗
   2026-06-25 CVE-2026-56054 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 3.1.1 Patched in 3.1.2
8. Medium · 5.3 JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.9 - Missing Authorization ↗
   2026-06-02 CVE-2026-48887 Missing Authorization Affects <= 3.0.9 Patched in 3.1.0
9. High · 7.5 JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.9 - Unauthenticated SQL Injection ↗
   2026-06-02 CVE-2026-48886 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.0.9 Patched in 3.1.0
10. High · 7.5 JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.4 - Unauthenticated SQL Injection via 'multiformid' Parameter ↗
    2026-03-25 CVE-2026-2511 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.0.4 Patched in 3.0.5
11. Medium · 4.3 JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.3 - Authenticated (Subscriber+) Insecure Direct Object Reference ↗
    2026-03-23 CVE-2026-32535 Authorization Bypass Through User-Controlled Key Affects <= 3.0.3 Patched in 3.0.4
12. Medium · 6.5 JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.3 - Authenticated (Subscriber+) SQL Injection ↗
    2026-03-20 CVE-2026-32534 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.0.3 Patched in 3.0.4
13. High · 7.5 JS Help Desk – AI-Powered Support & Ticketing System 2.8.2 - Unauthenticated SQL Injection via 'js-support-ticket-token-tkstatus' Cookie ↗
    2026-03-03 CVE-2023-7337 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.8.2 Patched in 2.8.3
14. Medium · 6.5 JS Help Desk <= 3.0.1 - Authenticated (Subscriber+) SQL Injection ↗
    2026-02-11 CVE-2026-24959 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.0.1 Patched in 3.0.2
15. High · 7.5 JS Help Desk <= 2.9.2 - Unauthenticated SQL Injection ↗
    2025-03-27 CVE-2025-30886 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.9.2 Patched in 2.9.3
16. Medium · 5.3 JS Help Desk <= 2.9.2 - Missing Authorization ↗
    2025-03-27 CVE-2025-30880 Missing Authorization Affects <= 2.9.2 Patched in 2.9.3
17. Critical · 9.8 JS Help Desk <= 2.9.2 - Unauthenticated Local File Inclusion ↗
    2025-03-27 CVE-2025-30901 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') Affects <= 2.9.2 Patched in 2.9.3
18. High · 7.5 JS Help Desk <= 2.9.1 - Unauthenticated Arbitrary File Download ↗
    2025-03-27 CVE-2025-30882 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 2.9.1 Patched in 2.9.2
19. Critical · 9.1 JS Help Desk <= 2.9.2 - Unauthenticated Arbitrary File Deletion ↗
    2025-03-27 CVE-2025-30878 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 2.9.2 Patched in 2.9.3
20. High · 7.5 JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory ↗
    2025-02-12 CVE-2024-13606 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.8.8 Patched in 2.8.9
21. Medium · 4.3 JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Authenticated (Subscriber+) Insecure Direct Object Reference ↗
    2025-02-03 CVE-2024-13607 Authorization Bypass Through User-Controlled Key Affects <= 2.8.8 Patched in 2.8.9
22. Medium · 4.4 JS Help Desk – Best Help Desk & Support Plugin <= 2.8.7 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2024-11-01 CVE-2024-51670 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.8.7 Patched in 2.8.8
23. Critical · 9.8 JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.6 - Unauthenticated PHP Code Injection to Remote Code Execution ↗
    2024-08-12 CVE-2024-7094 Improper Control of Generation of Code ('Code Injection') Affects <= 2.8.6 Patched in 2.8.7
24. Medium · 5.3 JS Help Desk – Best Help Desk & Support Plugin <= 2.8.3 - Missing Authorization ↗
    2024-04-05 CVE-2024-31273 Missing Authorization Affects <= 2.8.3 Patched in 2.8.4
25. Critical · 9.8 JS Help Desk <= 2.8.1 - Unauthenticated SQL Injection via email and trackingid ↗
    2023-12-21 CVE-2023-50839 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 2.8.2 Patched in 2.8.2
26. High · 7.2 JS Help Desk – Best Help Desk & Support Plugin <= 2.7.7 - Authenticated (Administrator+) Arbitrary File Upload ↗
    2023-08-17 CVE-2023-25444 Unrestricted Upload of File with Dangerous Type Affects <= 2.7.7 Patched in 2.7.8
27. Medium · 6.3 JS Help Desk – Best Help Desk & Support Plugin <= 2.7.7 - Authenticated (Subscriber+) Insecure Direct Object Reference ↗
    2023-06-20 CVE-2023-23679 Authorization Bypass Through User-Controlled Key Affects <= 2.7.7 Patched in 2.7.8
28. Critical · 9.8 JS Help Desk <= 2.7.1 - Unauthenticated Arbitrary File Upload ↗
    2023-01-27 CVE-2022-46839 Unrestricted Upload of File with Dangerous Type Affects <= 2.7.1 Patched in 2.7.2
29. Medium · 6.3 JS Help Desk <= 2.7.1 - Missing Authorization ↗
    2023-01-27 CVE-2022-46840 Missing Authorization Affects <= 2.7.1 Patched in 2.7.2
30. Critical · 9.1 JS Help Desk <= 2.7.1 - Missing Authorization to Plugin Settings Update ↗
    2023-01-27 CVE-2022-46838 Missing Authorization Affects 2.7.1 Patched in 2.7.2
31. High · 8.6 JS Help Desk <= 2.7.1 - Unauthenticated SQL Injection ↗
    2023-01-27 CVE-2022-47151 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.7.1 Patched in 2.7.2
32. Medium · 5.4 JS Help Desk <= 2.7.1 - Cross-Site Request Forgery ↗
    2023-01-27 CVE-2022-46842 Cross-Site Request Forgery (CSRF) Affects <= 2.7.1 Patched in 2.7.2
33. High · 8.8 JS Help Desk – Best Help Desk & Support Plugin <= 2.0.5 - Cross-Site Request Forgery ↗
    2018-06-25 CVE-2018-21002 Cross-Site Request Forgery (CSRF) Affects <= 2.0.5 Patched in 2.0.6

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 11 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-06-22 8K+ → 7K+ down after 81 days in tier
2. 2026-04-02 7K+ → 8K+ up after 17 days in tier
3. 2026-03-16 6K+ → 7K+ up after 1 days in tier
4. 2026-03-15 7K+ → 6K+ down after 1 days in tier
5. 2026-03-14 8K+ → 7K+ down after 73 days in tier
6. 2025-12-31 7K+ → 8K+ up after 17 days in tier
7. 2025-12-14 8K+ → 7K+ down after 5 days in tier
8. 2025-12-09 9K+ → 8K+ down after 119 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent 10K+ installs · 4.8★ · 2 shared tags A
• Fluent Support – Helpdesk & Customer Support Ticket System 10K+ installs · 4.5★ · 2 shared tags A
• Awesome Support – WordPress HelpDesk & Support Plugin 6K+ installs · 3.5★ · 2 shared tags B
• Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System 2K+ installs · 4.2★ · 2 shared tags A
• Nirweb support 800+ installs · 4.0★ · 2 shared tags D
• Customer Support Ticket System & Helpdesk 400+ installs · 4.2★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for JS Help Desk – AI-Powered Support & Ticketing System into a readme, a review or a deck. It updates itself.

JS Help Desk – AI-Powered Support & Ticketing System: 7K+ active installs, 3.7★ (74 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/js-support-ticket