Skip to content
OpenAdvisories

Vendor

ELEXtensions

30 known vulnerabilities.

Products

ELEX WordPress HelpDesk & Customer Ticketing System 16 ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes 4 ELEX WooCommerce Dynamic Pricing and Discounts 4 ELEX WooCommerce Bulk Edit Products, Prices & Attributes (Basic) 1 ELEX Product Feed for WooCommerce 1 ELEX WooCommerce Google Shopping (Google Product Feed) 1 WSChat – WordPress Live Chat 1 ELEX WooCommerce Request a Quote 1 ReachShip WooCommerce Multi-Carrier & Conditional Shipping 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-114630 Public exploit

    ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.8 - Unauthenticated Arbitrary File Deletion via 'ticket_attachment_path' Parameter

    The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the factory_reset function in all versions up to, and including, 3.3.8 This makes it possible for…

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System Web / CMS