A critical SQL injection vulnerability in the JS Help Desk plugin for WordPress allows unauthenticated attackers to extract sensitive data from the underlying database.

The application fails to properly sanitize the multiformid parameter within the storeTickets function, as it uses an ineffective escaping method that allows unauthenticated attackers to append malicious SQL queries.

The ability for an unauthenticated attacker to inject arbitrary SQL queries poses a severe risk to data confidentiality. Successful exploitation could lead to the unauthorized exfiltration of sensitive information, including user credentials or private support ticket data, which may result in regulatory non-compliance and significant reputational damage. The CVSS score of 7.5 reflects the high impact on confidentiality and the ease of exploitation over a network.

Immediate Action: Since a specific patch version is currently unconfirmed, administrators should deactivate and remove the JS Help Desk plugin from the WordPress environment until a security update is released by the vendor.

Proactive Monitoring: Security teams should monitor database logs for anomalous query patterns or unexpected strings originating from the storeTickets function endpoint.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns targeting the WordPress environment.

Public Exploit Available: Unknown.

Given the ease with which unauthenticated attackers can exploit this flaw to access sensitive data, immediate mitigation is required. Administrators must prioritize the removal of the vulnerable plugin to prevent potential data breaches until the vendor provides a verified security update.