JS Help Desk – AI-Powered Support & Ticketing System

76 Quality Score

Active Installs

17/30

At 7,000 active installs it is mid-tier in the help desk category, beating Majestic Support but trailing both Fluent Support and SupportCandy at 10,000 installs each.

Update Freshness

25/25

It was updated on 2026-07-10 and is tested against WordPress 7.0.1, which signals very active upkeep and forward compatibility.

User Rating

11/15

A 74 out of 100 from 74 ratings is a respectable average, though the small sample size makes it harder to draw firm conclusions about reliability.

Support Health

8/15

Zero support threads on record is unusual and could mean either that issues are rare or that users are directed to external support channels; it is a mild yellow flag.

WP Compatibility

15/15

It requires PHP 7.4 and WordPress 5.5 minimum, and has been validated against the latest core release, giving it a strong compatibility profile.

Scores higher than 46% of indexed plugins

About

Professional, beautiful, complete and powerful help desk & support system for WordPress.

Active Installs 7k+

Rating ★★★½ 3.7/5

Last Updated 2026-09-07 5:17am GMT

Requires WordPress 5.5+

Tested Up To 7.1

Requires PHP 7.4+

Security History

33 known vulnerabilities, all patched

6 Critical 10 High 17 Medium

Most recent: August 4, 2026

View details ▸

JS Help Desk – AI-Powered Support & Ticketing System < 3.1.4 - Authenticated (Subscriber+) Information Exposure Medium

August 4, 2026 Patched in ["3.1.4"] CVE-2026-14928

JS Help Desk – AI-Powered Support & Ticketing System < 3.1.4 - Unauthenticated Arbitrary Media Upload Medium

July 13, 2026 Patched in ["3.1.4"] CVE-2026-14930

JS Help Desk – AI-Powered Support & Ticketing System <= 3.1.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Cross-User Support Ticket Disclosure Medium

July 13, 2026 Patched in ["3.1.5"] CVE-2026-15209

JS Help Desk <= 3.1.3 - Missing Authorization to Authenticated (Subscriber+) Ticket Reply Modification Medium

July 13, 2026 Patched in ["3.1.4"] CVE-2026-14929

JS Help Desk <= 3.1.3 - Authenticated (Contributor+) User Email Disclosure Medium

July 13, 2026 Patched in ["3.1.4"] CVE-2026-14931

JS Help Desk – AI-Powered Support & Ticketing System <= 3.1.0 - Unauthenticated Insecure Direct Object Reference Medium

June 26, 2026 Patched in ["3.1.1"] CVE-2026-57652

JS Help Desk – AI-Powered Support & Ticketing System <= 3.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion High

June 25, 2026 Patched in ["3.1.2"] CVE-2026-56054

JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.9 - Missing Authorization Medium

June 2, 2026 Patched in ["3.1.0"] CVE-2026-48887

JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.9 - Unauthenticated SQL Injection High

June 2, 2026 Patched in ["3.1.0"] CVE-2026-48886

JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.4 - Unauthenticated SQL Injection via 'multiformid' Parameter High

March 25, 2026 Patched in ["3.0.5"] CVE-2026-2511

JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.3 - Authenticated (Subscriber+) Insecure Direct Object Reference Medium

March 23, 2026 Patched in ["3.0.4"] CVE-2026-32535

JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.3 - Authenticated (Subscriber+) SQL Injection Medium

March 20, 2026 Patched in ["3.0.4"] CVE-2026-32534

JS Help Desk – AI-Powered Support & Ticketing System 2.8.2 - Unauthenticated SQL Injection via 'js-support-ticket-token-tkstatus' Cookie High

March 3, 2026 Patched in ["2.8.3"] CVE-2023-7337

JS Help Desk <= 3.0.1 - Authenticated (Subscriber+) SQL Injection Medium

February 11, 2026 Patched in ["3.0.2"] CVE-2026-24959

JS Help Desk <= 2.9.2 - Unauthenticated SQL Injection High

March 27, 2025 Patched in ["2.9.3"] CVE-2025-30886

JS Help Desk <= 2.9.2 - Missing Authorization Medium

March 27, 2025 Patched in ["2.9.3"] CVE-2025-30880

JS Help Desk <= 2.9.2 - Unauthenticated Local File Inclusion Critical

March 27, 2025 Patched in ["2.9.3"] CVE-2025-30901

JS Help Desk <= 2.9.1 - Unauthenticated Arbitrary File Download High

March 27, 2025 Patched in ["2.9.2"] CVE-2025-30882

JS Help Desk <= 2.9.2 - Unauthenticated Arbitrary File Deletion Critical

March 27, 2025 Patched in ["2.9.3"] CVE-2025-30878

JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory High

February 12, 2025 Patched in ["2.8.9"] CVE-2024-13606

JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Authenticated (Subscriber+) Insecure Direct Object Reference Medium

February 3, 2025 Patched in ["2.8.9"] CVE-2024-13607

JS Help Desk – Best Help Desk & Support Plugin <= 2.8.7 - Authenticated (Administrator+) Stored Cross-Site Scripting Medium

November 1, 2024 Patched in ["2.8.8"] CVE-2024-51670

JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.6 - Unauthenticated PHP Code Injection to Remote Code Execution Critical

August 12, 2024 Patched in ["2.8.7"] CVE-2024-7094

JS Help Desk – Best Help Desk & Support Plugin <= 2.8.3 - Missing Authorization Medium

April 5, 2024 Patched in ["2.8.4"] CVE-2024-31273

JS Help Desk <= 2.8.1 - Unauthenticated SQL Injection via email and trackingid Critical

December 21, 2023 Patched in ["2.8.2"] CVE-2023-50839

JS Help Desk – Best Help Desk & Support Plugin <= 2.7.7 - Authenticated (Administrator+) Arbitrary File Upload High

August 17, 2023 Patched in ["2.7.8"] CVE-2023-25444

JS Help Desk – Best Help Desk & Support Plugin <= 2.7.7 - Authenticated (Subscriber+) Insecure Direct Object Reference Medium

June 20, 2023 Patched in ["2.7.8"] CVE-2023-23679

JS Help Desk <= 2.7.1 - Unauthenticated Arbitrary File Upload Critical

January 27, 2023 Patched in ["2.7.2"] CVE-2022-46839

JS Help Desk <= 2.7.1 - Missing Authorization Medium

January 27, 2023 Patched in ["2.7.2"] CVE-2022-46840

JS Help Desk <= 2.7.1 - Missing Authorization to Plugin Settings Update Critical

January 27, 2023 Patched in ["2.7.2"] CVE-2022-46838

JS Help Desk <= 2.7.1 - Unauthenticated SQL Injection High

January 27, 2023 Patched in ["2.7.2"] CVE-2022-47151

JS Help Desk <= 2.7.1 - Cross-Site Request Forgery Medium

January 27, 2023 Patched in ["2.7.2"] CVE-2022-46842

JS Help Desk – Best Help Desk & Support Plugin <= 2.0.5 - Cross-Site Request Forgery High

June 25, 2018 Patched in ["2.0.6"] CVE-2018-21002

What It Does

JS Help Desk is a WordPress plugin that turns your site into a ticketing hub where customers can submit issues, track their status, and search a built-in knowledge base. It includes AI-powered support features aimed at automating or assisting ticket handling. The system covers the core help desk workflow: ticket creation, assignment, status updates, and a self-service knowledge base.

Who It's For

This plugin fits small to mid-sized WordPress sites that need an internal ticketing system without paying for a SaaS subscription. It is well suited to teams that want a self-hosted solution with a knowledge base bundled in, and that are comfortable with a moderate learning curve. The 7,000 active installs suggest it has found traction in this niche.

Who Should Skip It

If you already use Fluent Support or SupportCandy with a paid agent license, switching to JS Help Desk is unlikely to be worth the migration effort. Sites needing live chat, telephony, or deep CRM integrations should also look elsewhere, as JS Help Desk is primarily a ticketing and knowledge base tool.

The Bottom Line

JS Help Desk delivers a competent ticketing and knowledge base solution with strong maintenance signals and solid compatibility, but its lack of visible support threads and only middling user ratings keep it from the top of the category. It is a reasonable choice for smaller sites that want a self-hosted help desk without paying for premium tiers. Larger teams or those needing richer integration should compare it closely against Fluent Support and SupportCandy before committing.

Pick SupportCandy if you want a larger install base at 10,000 and a higher overall score of 80.11, and especially if live chat with an AI agent matters to your workflow.

Fluent Support – Helpdesk & Customer Support Ticket System 79/100

Pick Fluent Support if you already use other Fluent CRM or marketing plugins, since it integrates natively with that ecosystem and matches SupportCandy's 10,000 installs.

Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin 78/100

Pick Majestic Support if you want a similar feature set but are willing to trade a lower install count (3,000) for its 78.07 quality score.

Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System 76/100

Pick Support Genix Lite if AI chatbot capability is your primary requirement and you want a comparable quality score of 75.78 at 2,000 installs.

Awesome Support – WordPress HelpDesk & Support Plugin 75/100

Pick Awesome Support if you value a long-established plugin with 6,000 installs and a mature extension marketplace, even though its overall score of 74.92 is marginally lower.