Smackcoders Inc. WordPress Helpdesk Integration vulnerabilities

Latest Smackcoders Inc. WordPress Helpdesk Integration CVEs

Newest publication first

1. CVE-2025-9990 WordPress Helpdesk Integration <= 5.8.10 - Unauthenticated Local File Inclusion

   Published 2025-09-05

   High·CVSS 8.1 EPSS 1.3%

   The WordPress Helpdesk Integration plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.8.10 via the portal_type parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.