Ahmad

14 CVEs in 4 Ahmad products, including Js Help Desk, Wp Job Portal, Geekybot. Newest: CVE-2026-22386 (2026-10-29).

Ahmad products with known CVEs

ProductCVEs
Js Help Desk5
Wp Job Portal5
Geekybot2
Majestic Support2
Ahmad CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-22386Medium4.32026-10-29Missing Authorization vulnerability in Ahmad WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff…
CVE-2026-112218Medium5.32026-10-22Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This iss…
CVE-2026-103079Medium5.42026-10-05Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control…
CVE-2026-103078Medium4.32026-10-05Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control…
CVE-2026-102381Medium5.32026-10-01Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This iss…
CVE-2026-81299Medium4.32026-08-28Subscriber Insecure Direct Object References (IDOR) in WP Job Portal <= 2.5.9 versions.
CVE-2026-56054High7.72026-06-25Subscriber Arbitrary File Deletion in JS Help Desk <= 3.1.1 versions.
CVE-2026-48887Medium6.52026-06-15Unauthenticated Broken Access Control in JS Help Desk <= 3.0.9 versions.
CVE-2026-48886Critical9.32026-06-15Unauthenticated SQL Injection in JS Help Desk <= 3.0.9 versions.
CVE-2026-48880Medium6.52026-06-15Subscriber Cross Site Scripting (XSS) in WP Job Portal <= 2.5.2 versions.
CVE-2026-40772Critical10.02026-06-15Unauthenticated Arbitrary File Upload in GeekyBot <= 1.2.2 versions.
CVE-2026-39519Critical9.32026-06-15Unauthenticated SQL Injection in GeekyBot <= 1.2.0 versions.
CVE-2026-42685High7.12026-06-02Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ahmad WP Job Portal allows Reflected XSS. This issue aff…
CVE-2026-42684Critical9.32026-06-02Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ahmad WP Job Portal allows Blind SQL Injection. This iss…