Description
Subscriber SQL Injection in ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ELEXtensions | ELEX WordPress HelpDesk & Customer Ticketing System | ≤ 3.3.6 | — |
High · 8.5
CVE-2026-48964
EUVD-2026-36863GHSA-784v-3q4c-pmjg
WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.6 - SQL Injection vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack