CVEs we hold for Joomsky

Records whose assigning authority named Joomsky as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-57652WordPress JS Help Desk plugin <= 3.1.0 - Insecure Direct Object References (IDOR) vulnerabilityJoomSky JS Help Desk

CVE-2026-32535WordPress JS Help Desk plugin <= 3.0.3 - Insecure Direct Object References (IDOR) vulnerabilityJoomSky JS Help Desk

CVE-2026-32534WordPress JS Help Desk plugin <= 3.0.3 - SQL Injection vulnerabilityJoomSky JS Help Desk

CVE-2026-24959WordPress JS Help Desk plugin <= 3.0.1 - SQL Injection vulnerabilityJoomSky JS Help Desk

CVE-2025-58234WordPress JS Job Manager Plugin <= 2.0.2 - Cross Site Scripting (XSS) VulnerabilityJoomSky JS Job Manager

CVE-2025-54475Extension - joomsky.com - SQL injection in JS jobs component version 1.3.2 - 1.4.4 for Joomlajoomsky.com JS Jobs component for Joomla

CVE-2025-49484Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.1 for Joomlajoomsky.com JS Jobs component for Joomla

CVE-2025-32660WordPress JS Job Manager plugin <= 2.0.2 - Arbitrary File Upload vulnerabilityJoomSky JS Job Manager

CVE-2025-32627WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerabilityJoomSky JS Job Manager

CVE-2025-32626WordPress JS Job Manager plugin <= 2.0.2 - SQL Injection vulnerabilityJoomSky JS Job Manager

CVE-2025-32146WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerabilityJoomSky JS Job Manager

CVE-2025-31868WordPress JS Job Manager plugin <= 2.0.2 - Broken Access Control vulnerabilityJoomSky JS Job Manager

CVE-2025-31867WordPress JS Job Manager Plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerabilityJoomSky JS Job Manager

CVE-2025-30901WordPress JS Help Desk plugin <= 2.9.2 - Local File Inclusion vulnerabilityJoomSky JS Help Desk

CVE-2025-30886WordPress JS Help Desk plugin <= 2.9.2 - SQL Injection vulnerabilityJoomSky JS Help Desk

CVE-2025-30882WordPress JS Help Desk plugin <= 2.9.1 - Arbitrary File Download vulnerabilityJoomSky JS Help Desk

CVE-2025-30880WordPress JS Help Desk plugin <= 2.9.2 - Broken Access Control vulnerabilityJoomSky JS Help Desk

CVE-2025-30878WordPress JS Help Desk plugin <= 2.9.2 - Arbitrary File Deletion vulnerabilityJoomSky JS Help Desk

CVE-2025-25109WordPress Vehicle Manager plugin <= 3.1 - Local File Inclusion vulnerabilityJoomSky WP Vehicle Manager

CVE-2025-22209Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.3 for Joomlajoomsky.com JS Jobs component for Joomla

CVE-2025-22208Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.3 for Joomlajoomsky.com JS Jobs component for Joomla

CVE-2025-22206Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.2 for Joomlajoomsky.com JS Jobs component for Joomla

CVE-2024-51670WordPress JS Help Desk plugin <= 2.8.7 - Stored Cross Site Scripting (XSS) vulnerabilityJoomSky JS Help Desk

CVE-2023-31087WordPress JS Job Manager Plugin <=2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)JoomSky JS Job Manager

CVE-2023-28689WordPress JS Job Manager plugin <= 2.0.0 - Broken Access Control vulnerabilityJoomSky JS Job Manager

CVE-2023-25963WordPress JS Job Manager Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)JoomSky JS Job Manager

CVE-2020-37226Joomla J2 JOBS 1.3.0 Authenticated SQL Injection via sortbyJoomsky J2 JOBS

CVE-2020-37224Joomla J2 JOBS 1.3.0 Authenticated SQL Injection via sortbyJoomsky J2 JOBS

CVE-2019-25740Joomla com_jsjobs 1.2.6 Arbitrary File DeletionJoomsky JS Jobs

CVE-2018-25327Joomla! Component Js Jobs 1.2.0 Cross-Site Request ForgeryJoomsky JS Jobs

30 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.