JS Help Desk – Best Help Desk & Support Plugin - SQLi (CVE-2023-50839)

CVE-2023-50839 is a critical SQL injection vulnerability in the JS Help Desk – Best Help Desk & Support Plugin, affecting versions up to 2.8.1. This flaw allows remote, unauthenticated attackers to inject malicious SQL commands, potentially leading to unauthorized access to sensitive database information or disruption of help desk operations.

CrowdSec has been tracking this vulnerability and its exploits since 15th of April 2026.

CrowdSec network observations suggest that most exploitation of CVE-2023-50839 involves focused reconnaissance to identify viable targets. Attackers typically tailor their campaigns based on system exposure and configuration. It is unlikely that a given attack is accidental. CrowdSec data also reveals a clear uptick in attacks involving CVE-2023-50839 over the past week. Activity is above the usual baseline, suggesting growing attention from attackers. This may reflect rising awareness, recent exploit releases, or expanded targeting efforts.

Attackers exploit the /js-support-ticket-controlpanel/ endpoint by injecting SQL commands into the email or ticketid parameters, often using time-based payloads such as SLEEP(8) to confirm the vulnerability and extract sensitive data from the WordPress JS Help Desk plugin.