Skip to content
OpenAdvisories

Product · ELEXtensions

ELEX WordPress HelpDesk & Customer Ticketing System

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.5
    CVE-2026-48964

    WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.6 - SQL Injection vulnerability

    Subscriber SQL Injection in ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.6 versions.

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System Web / CMS
  • High 7.2
    CVE-2025-9343

    ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.4 - Unauthenticated Stored Cross-Site Scripting

    The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ticket subjects in all versions up to, and including, 3.3.4 due to insufficient input sanitization and output escaping. This makes it…

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System Web / CMS
  • High 8.8
    CVE-2024-12171

    ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

    The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the 'eh_crm_agent_add_user' AJAX action in all versions up to, and including, 3.2.6. This makes it possible…

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System Web / CMS