Plugin Pulse Beta
← Pulse

JS Help Desk – AI-Powered Support & Ticketing System

by JoomSky · Chat & Support

Also makes 1 other plugin · 7.1K+ installs across the portfolio →

Try it live ↗ wp.org ↗

A complete help desk in WordPress: unlimited tickets and agents, a customer portal, AI reply help, and 12 features that used to be paid.

Try it live opens a temporary test site in your browser, which can take about 20 seconds to load. Plugins that rely on outside services or a full server may not work completely there.

Health

B 80/100

no flags

Active installs

7K+

≈7.6K estimated

Momentum

+19%

downloads vs prior 30d

Biggest opportunity: Swap “knowledge base”, “helpdesk” and “customer support” for “ticketing”, “js” and “ticket system”. “knowledge base” isn't earning its slot: you're not in the first 24 results for its own search. “ticketing” sits at #5 untagged, close enough for a declared tag to move it up. “helpdesk” isn't earning its slot: it only gets you to #23. “js” sits at #8 untagged, close enough for a declared tag to move it up. “customer support” isn't earning its slot: it only gets you to #14. “ticket system” sits at #8 untagged, close enough for a declared tag to move it up. All five slots are taken, so one has to go.

See the detail → Get the free audit
How scoring works →
80 Health · B
Maintenance 100/100
Rating quality 68/100
Support 70/100
Security 75/100

80 health vs 64 average across 1,177 Chat & Support plugins

7K+

Active installs

≈7.6K estimated

739.5K

Total downloads

since 2014 · 0.9% still active

3.7/5

Rating

74 reviews

+19%

43.5K

Downloads · 30d

category median +4%

Install conversion

How it's measured →

0.9%

of downloads still active

At least 7K of 739.5K lifetime downloads are still running, in line with its category: the median Chat & Support plugin keeps 0.8%, across 630 plugins.

Downloads count every update, not just first installs, so older and more frequently released plugins read lower. Compare against other Chat & Support plugins, not across the directory. wp.org reports active installs as the bottom of a band, so the real rate is this or higher.

This plugin shipped 22 releases in the last 12 months, and every existing install that updated counted as another download. wp.org publishes no split between first installs and updates, so we show the raw rate rather than guess at one.

Ratings · 74 reviews

Read on wp.org ↗
5★
45 4★
3 3★
4 2★
4 1★
18

Details

Version
5.0.3
Last updated
2d ago
Added
2014-10-10 · 12 yrs old
Requires WP
5.5
Tested up to
7.1.4
Requires PHP
7.4
Changelog ↗Support forum ↗Reviews ↗Advanced stats ↗

Directory ranking optimization

How it's scored →

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

95 / 100

Excellent listing optimization

Well tuned across the board

Update recency 100/100

Updated 2 days ago

WP compatibility 100/100

Tested up to WordPress 7.1.4, the current branch or newer

Rating quality 77/100

3.7★ over 74 reviews, smoothed to 3.86★

Listing tuning 100/100

5 of 5 tags set · short description in place

Daily downloads

Since 5 Oct 2022 · 1,489 days · wp.org + Plugin Pulse archive

+19% vs prior 30d
8.1K1 Nov 2026

30-day downloads

Rolling 30-day volume · peak 45K · peaks are release surges

45K1 Nov 2026

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

JS Help Desk · #2494youSupport Genix · #4175SupportCandy · #1946Customer Support Tic · #9867

Rating trend

Star average over time · dips mark rough releases

3.71 Nov 2026

Health trend

Composite health score, snapshotted daily

801 Nov 2026

Update activity

How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.

6.4K1 Nov 2026

Release cadence

Actively maintained
from wp.org release tags

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

22

releases in the last 12 months

2d ago

latest release · v5.0.3 · 30 Oct 2026

43

tagged releases on record

Recent releases

5.0.3 · 30 Oct 20265.0.2 · 20 Oct 20265.0.1 · 6 Oct 20265.0.0 · 2 Oct 20264.0.0 · 7 Sep 20263.1.7 · 10 Aug 20263.1.6 · 24 Jul 20263.1.5 · 10 Jul 20263.1.4 · 8 Jul 20263.1.3 · 22 Jun 20263.1.2 · 16 Jun 20263.1.1 · 4 Jun 20263.1.0 · 20 May 20263.0.9 · 15 May 2026

What its installed base runs

via wordpress.org

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

v3.1 76%
v3.0 18%
Older / other versions 5.9%

Estimated active installs

The public count shows “7K+”. Our estimate pins where the real number sits.

tracked estimate
7K–8K ≈7.6K

Crossed into this band 4 months ago; a band this size takes about a year or more to cross, which places it about 64% of the way through.

Install history since 1 May 2017

7K1 Nov 2026

Recent reviews

All reviews on wp.org ↗
  1. ★★★★★ anacapaviewestates
    4mo ago

    The system is very buggy, I don’t want to spend time recoding and i won’t buy another level if the free version doesn’t work correctly; submit button on front end doesn’t work correctly.

    Read on wp.org ↗
  2. ★★★★★ mary1991
    1.2y ago

    Awesome plugin , does what its says and more

    Read on wp.org ↗
  3. ★★★★★ Oooh Boi
    1.4y ago

    Functionality-wise this plugin is really solid. However, when it comes to re-styling… my dear lord, I have never seen such a badly written CSS in my 25 years of developer career. It just can’t be any worse; chained classes, use of important clause, no flexbox or grid, form elements styled up per form, redundancy, overwriting… the worst of all: there’s no way to disable default stylesheet. Whoever did this is an absolute amateur. In the era of AI, is it really that hard to prompt for a stylesheet optimization? If the PRO version utilises identical CSS I’d ask for a refund within 2 minutes.

    Read on wp.org ↗
  4. ★★★★★ chrisbg
    1.6y ago

    Great Plugin!

    Read on wp.org ↗
  5. ★★★★★ chandlertill
    1.8y ago

    We used both versions free and professional for years

    Read on wp.org ↗
  6. ★★★★★ geraldroy
    1.9y ago

    Lots of features, easy to use. Best ever plugin for support.

    Read on wp.org ↗
  7. ★★★★★ luisdiego9
    1.9y ago

    Amazing plugin. Keep it up!

    Read on wp.org ↗
  8. ★★★★★ erictyl
    1.9y ago

    Easy to use. There is a lot of value in the free version and even more in the other plugin paid version.

    Read on wp.org ↗

Latest updates

via wp.org changelog

Recent releases and news for this plugin

  1. — Version 3.1.5 Security Updated. 3.1.5
  2. — Version 3.1.4 Security Updated. 3.1.4
  3. — Version 3.1.3 Added Auto Cleanup add-on for automated attachment and ticket deletion, complete with server performance controls, dedicated settings, and UI indicators. Improved System Errors log with detailed execution traces, databas 3.1.3
  4. — Version 3.1.2 Security update. 3.1.2
  5. — Version 3.1.1 Security update. 3.1.1
  6. — Version 3.1.0 Security Fix: Implemented strict authorization and nonce verifications to prevent unauthorized access to ticket actions and attachment downloads. 3.1.0

Security history

via Wordfence Intelligence

All 36 disclosed vulnerabilities are patched in the current version (5.0.3). Sites still on an older version should update.

  1. Patched Medium · 4.9 JS Help Desk <= 5.0.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'support_custom_img' Parameter ↗
    2026-10-30 CVE-2026-104739 Improper Limitation of a Pathname to a Restricted Directory Affects <= 5.0.1 Patched in 5.0.2
  2. Patched Medium · 4.3 JS Help Desk – AI-Powered Support & Ticketing System <= 4.0.0 - Authenticated (Subscriber+) Insecure Direct Object Reference ↗
    2026-10-05 CVE-2026-103079 Authorization Bypass Through User-Controlled Key Affects <= 4.0.0 Patched in 5.0.0
  3. Patched Medium · 4.3 JS Help Desk – AI-Powered Support & Ticketing System <= 4.0.0 - Authenticated (Subscriber+) Insecure Direct Object Reference ↗
    2026-10-05 CVE-2026-103078 Authorization Bypass Through User-Controlled Key Affects <= 4.0.0 Patched in 5.0.0
  4. Patched Medium · 4.3 JS Help Desk – AI-Powered Support & Ticketing System < 3.1.4 - Authenticated (Subscriber+) Information Exposure ↗
    2026-08-04 CVE-2026-14928 Exposure of Sensitive Information to an Unauthorized Actor Affects < 3.1.4 Patched in 3.1.4
  5. Patched Medium · 5.3 JS Help Desk – AI-Powered Support & Ticketing System < 3.1.4 - Unauthenticated Arbitrary Media Upload ↗
    2026-07-13 CVE-2026-14930 Missing Authorization Affects < 3.1.4 Patched in 3.1.4
  6. Patched Medium · 4.3 JS Help Desk – AI-Powered Support & Ticketing System <= 3.1.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Cross-User Support Ticket Disclosure ↗
    2026-07-13 CVE-2026-15209 Authorization Bypass Through User-Controlled Key Affects <= 3.1.4 Patched in 3.1.5
  7. Patched Medium · 4.3 JS Help Desk <= 3.1.3 - Missing Authorization to Authenticated (Subscriber+) Ticket Reply Modification ↗
    2026-07-13 CVE-2026-14929 Incorrect Authorization Affects <= 3.1.3 Patched in 3.1.4
  8. Patched Medium · 4.3 JS Help Desk <= 3.1.3 - Authenticated (Contributor+) User Email Disclosure ↗
    2026-07-13 CVE-2026-14931 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 3.1.3 Patched in 3.1.4
  9. Patched Medium · 5.3 JS Help Desk – AI-Powered Support & Ticketing System <= 3.1.0 - Unauthenticated Insecure Direct Object Reference ↗
    2026-06-26 CVE-2026-57652 Authorization Bypass Through User-Controlled Key Affects <= 3.1.0 Patched in 3.1.1
  10. Patched High · 8.8 JS Help Desk – AI-Powered Support & Ticketing System <= 3.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion ↗
    2026-06-25 CVE-2026-56054 Improper Limitation of a Pathname to a Restricted Directory Affects <= 3.1.1 Patched in 3.1.2
  11. Patched Medium · 5.3 JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.9 - Missing Authorization ↗
    2026-06-02 CVE-2026-48887 Missing Authorization Affects <= 3.0.9 Patched in 3.1.0
  12. Patched High · 7.5 JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.9 - Unauthenticated SQL Injection ↗
    2026-06-02 CVE-2026-48886 Improper Neutralization of Special Elements used in an SQL Command Affects <= 3.0.9 Patched in 3.1.0
  13. Patched High · 7.5 JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.4 - Unauthenticated SQL Injection via 'multiformid' Parameter ↗
    2026-03-25 CVE-2026-2511 Improper Neutralization of Special Elements used in an SQL Command Affects <= 3.0.4 Patched in 3.0.5
  14. Patched Medium · 4.3 JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.3 - Authenticated (Subscriber+) Insecure Direct Object Reference ↗
    2026-03-23 CVE-2026-32535 Authorization Bypass Through User-Controlled Key Affects <= 3.0.3 Patched in 3.0.4
  15. Patched Medium · 6.5 JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.3 - Authenticated (Subscriber+) SQL Injection ↗
    2026-03-20 CVE-2026-32534 Improper Neutralization of Special Elements used in an SQL Command Affects <= 3.0.3 Patched in 3.0.4
  16. Patched High · 7.5 JS Help Desk – AI-Powered Support & Ticketing System 2.8.2 - Unauthenticated SQL Injection via 'js-support-ticket-token-tkstatus' Cookie ↗
    2026-03-03 CVE-2023-7337 Improper Neutralization of Special Elements used in an SQL Command Affects <= 2.8.2 Patched in 2.8.3
  17. Patched Medium · 6.5 JS Help Desk <= 3.0.1 - Authenticated (Subscriber+) SQL Injection ↗
    2026-02-11 CVE-2026-24959 Improper Neutralization of Special Elements used in an SQL Command Affects <= 3.0.1 Patched in 3.0.2
  18. Patched High · 7.5 JS Help Desk <= 2.9.2 - Unauthenticated SQL Injection ↗
    2025-03-27 CVE-2025-30886 Improper Neutralization of Special Elements used in an SQL Command Affects <= 2.9.2 Patched in 2.9.3
  19. Patched Medium · 5.3 JS Help Desk <= 2.9.2 - Missing Authorization ↗
    2025-03-27 CVE-2025-30880 Missing Authorization Affects <= 2.9.2 Patched in 2.9.3
  20. Patched Critical · 9.8 JS Help Desk <= 2.9.2 - Unauthenticated Local File Inclusion ↗
    2025-03-27 CVE-2025-30901 Improper Control of Filename for Include/Require Statement in PHP Program Affects <= 2.9.2 Patched in 2.9.3
  21. Patched High · 7.5 JS Help Desk <= 2.9.1 - Unauthenticated Arbitrary File Download ↗
    2025-03-27 CVE-2025-30882 Improper Limitation of a Pathname to a Restricted Directory Affects <= 2.9.1 Patched in 2.9.2
  22. Patched Critical · 9.1 JS Help Desk <= 2.9.2 - Unauthenticated Arbitrary File Deletion ↗
    2025-03-27 CVE-2025-30878 Improper Limitation of a Pathname to a Restricted Directory Affects <= 2.9.2 Patched in 2.9.3
  23. Patched High · 7.5 JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory ↗
    2025-02-12 CVE-2024-13606 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.8.8 Patched in 2.8.9
  24. Patched Medium · 4.3 JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Authenticated (Subscriber+) Insecure Direct Object Reference ↗
    2025-02-03 CVE-2024-13607 Authorization Bypass Through User-Controlled Key Affects <= 2.8.8 Patched in 2.8.9
  25. Patched Medium · 4.4 JS Help Desk – Best Help Desk & Support Plugin <= 2.8.7 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2024-11-01 CVE-2024-51670 Improper Neutralization of Input During Web Page Generation Affects <= 2.8.7 Patched in 2.8.8
  26. Patched Critical · 9.8 JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.6 - Unauthenticated PHP Code Injection to Remote Code Execution ↗
    2024-08-12 CVE-2024-7094 Improper Control of Generation of Code Affects <= 2.8.6 Patched in 2.8.7
  27. Patched Medium · 5.3 JS Help Desk – Best Help Desk & Support Plugin <= 2.8.3 - Missing Authorization ↗
    2024-04-05 CVE-2024-31273 Missing Authorization Affects <= 2.8.3 Patched in 2.8.4
  28. Patched Critical · 9.8 JS Help Desk <= 2.8.1 - Unauthenticated SQL Injection via email and trackingid ↗
    2023-12-21 CVE-2023-50839 Improper Neutralization of Special Elements used in an SQL Command Affects < 2.8.2 Patched in 2.8.2
  29. Patched High · 7.2 JS Help Desk – Best Help Desk & Support Plugin <= 2.7.7 - Authenticated (Administrator+) Arbitrary File Upload ↗
    2023-08-17 CVE-2023-25444 Unrestricted Upload of File with Dangerous Type Affects <= 2.7.7 Patched in 2.7.8
  30. Patched Medium · 6.3 JS Help Desk – Best Help Desk & Support Plugin <= 2.7.7 - Authenticated (Subscriber+) Insecure Direct Object Reference ↗
    2023-06-20 CVE-2023-23679 Authorization Bypass Through User-Controlled Key Affects <= 2.7.7 Patched in 2.7.8
  31. Patched Critical · 9.8 JS Help Desk <= 2.7.1 - Unauthenticated Arbitrary File Upload ↗
    2023-01-27 CVE-2022-46839 Unrestricted Upload of File with Dangerous Type Affects <= 2.7.1 Patched in 2.7.2
  32. Patched Medium · 6.3 JS Help Desk <= 2.7.1 - Missing Authorization ↗
    2023-01-27 CVE-2022-46840 Missing Authorization Affects <= 2.7.1 Patched in 2.7.2
  33. Patched Critical · 9.1 JS Help Desk <= 2.7.1 - Missing Authorization to Plugin Settings Update ↗
    2023-01-27 CVE-2022-46838 Missing Authorization Affects 2.7.1 Patched in 2.7.2
  34. Patched High · 8.6 JS Help Desk <= 2.7.1 - Unauthenticated SQL Injection ↗
    2023-01-27 CVE-2022-47151 Improper Neutralization of Special Elements used in an SQL Command Affects <= 2.7.1 Patched in 2.7.2
  35. Patched Medium · 5.4 JS Help Desk <= 2.7.1 - Cross-Site Request Forgery ↗
    2023-01-27 CVE-2022-46842 Cross-Site Request Forgery Affects <= 2.7.1 Patched in 2.7.2
  36. Patched High · 8.8 JS Help Desk – Best Help Desk & Support Plugin <= 2.0.5 - Cross-Site Request Forgery ↗
    2018-06-25 CVE-2018-21002 Cross-Site Request Forgery Affects <= 2.0.5 Patched in 2.0.6

Vulnerability records provided by Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. License and terms.

CVE records: Copyright 1999-2026 The MITRE Corporation. CVE terms of use.

Languages

via translate.wordpress.org

Translated into 11 languages, 0 at 90% or more

Turkish 28%
Spanish (Spain) 20%
Greek 15%
Dutch 14%
French (France) 12%
Chinese (China) 7%
Czech 7%
Russian 6%
Italian 5%
Polish 3%
Vietnamese 1%

AI assistants

How it's measured →

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Readme readiness

8 of 8 pass · checked 28 Oct 2026

Can an assistant quote this readme? Eight deterministic checks over the wp.org listing, no model involved.

  • ✓ Says what it does "A complete help desk in WordPress: unlimited tickets and agents, a customer portal, AI reply help, and 12 f..."
  • ✓ Has a FAQ 17 questions in the FAQ.
  • ✓ FAQ asks real questions 17 of 17 read like questions a user would type.
  • ✓ Names who it is for Names its audience or use cases ("who need", "made for").
  • ✓ Names what it works with Mentions WooCommerce, Mailchimp, Easy Digital Downloads, Cloudflare and 4 more.
  • ✓ Headings and lists 13 headings and 17 lists.
  • ✓ Enough to quote 13,193 characters of description.
  • ✓ Tags match the text 3 of 5 tags appear in the text; "Support Ticket", "ticketing system" do not.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

  1. 2026-06-22 8K+ → 7K+ down after 81 days in tier
  2. 2026-04-02 7K+ → 8K+ up after 17 days in tier
  3. 2026-03-16 6K+ → 7K+ up after 1 days in tier
  4. 2026-03-15 7K+ → 6K+ down after 1 days in tier
  5. 2026-03-14 8K+ → 7K+ down after 73 days in tier
  6. 2025-12-31 7K+ → 8K+ up after 17 days in tier
  7. 2025-12-14 8K+ → 7K+ down after 5 days in tier
  8. 2025-12-09 9K+ → 8K+ down after 119 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for JS Help Desk – AI-Powered Support & Ticketing System into a readme, a review or a deck. It updates itself.

<iframe src="https://plugins.wpmayor.com/embed/js-support-ticket" width="480" height="300" style="border:0" loading="lazy" title="JS Help Desk – AI-Powered Support & Ticketing System — Plugin Pulse"></iframe>
Preview card ↗

JS Help Desk – AI-Powered Support & Ticketing System: 7K+ active installs, 3.7★ (74 reviews). Plugin Pulse (WP Mayor), as of 2026-11-01. https://plugins.wpmayor.com/plugin/js-support-ticket

Spotted a number that looks wrong? Report a data issue and we'll check it against the source.