Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-125855 EUVD-2026-125410GHSA-hqcj-3w2m-259w

WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.9 - PHP Object Injection vulnerability

Published Nov 13, 2026 · Updated Nov 13, 2026 · Assigned by Patchstack

Vendor: ELEXtensions Product: ELEX WordPress HelpDesk & Customer Ticketing System Category: Web / CMS

Description

Deserialization of Untrusted Data vulnerability in Elextensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Object Injection.This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from n/a through 3.3.9.

Affected products

VendorProductAffectedFixed
Elextensions ELEX WordPress HelpDesk & Customer Ticketing System ≤ 3.3.9 —

References