ELEX WordPress HelpDesk & Customer Ticketing System

Explore ELEX WordPress HelpDesk & Customer Ticketing System vulnerabilities across all versions. Currently tracking 14 known vulnerabilities, including severity, impact, and patch status.

01234567891031.01.2025Today31.01.20258.8ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation CVSS 8.8 · 31.01.202508.05.20258.8ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.9 - Authenticated (Subscriber+) Arbitrary File Upload CVSS 8.8 · 08.05.202520.11.20254.3ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Role Removal CVSS 4.3 · 20.11.20254.3ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.9 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_client' CVSS 4.3 · 20.11.20254.3ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Restore CVSS 4.3 · 20.11.20254.3ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.0 - Missing Authorization to Authenitcated (Subscriber+) to Scheduled Trigger Deletion CVSS 4.3 · 20.11.20254.3ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Empty CVSS 4.3 · 20.11.20254.3ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Ticket Restore CVSS 4.3 · 20.11.20259.8ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Unauthenticated Arbitrary File Upload CVSS 9.8 · 20.11.202501.12.20256.3ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.2 - Authenticated (Contributor+) Privilege Escalation via eh_crm_edit_agent AJAX Action CVSS 6.3 · 01.12.202520.12.20257.2ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.4 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 20.12.202527.01.20264.3ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.5 - Missing Authorization CVSS 4.3 · 27.01.202604.02.20265.3ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.5 - Missing Authorization to Authenticated (Subscriber+) Settings Update CVSS 5.3 · 04.02.202602.06.20266.5ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.6 - Authenticated (Subscriber+) SQL Injection CVSS 6.5 · 02.06.2026

Strategic Overview

Avg CVSSMedium
5.9/ 10
Patch Coverage100%
Open

0

Fixed

14

Get automatic notifications for all ELEX WordPress HelpDesk & Customer Ticketing System vulnerabilities before they are exploited.

Vulnerability Records

14 records
2026-06-02 00:00CVE-2026-48964
6.5
Medium
Mukhlis AmienYes
2026-02-04 20:43CVE-2025-14079
5.3
Medium
Itthidej Aramsri (Boeing777)Yes
2026-01-27 00:00CVE-2025-68837
4.3
Medium
benzdeusYes
2025-12-20 14:59CVE-2025-9343
7.2
High
Athiwat Tiprasaharn (Jitlada)Yes
2025-12-01 00:00CVE-2025-13534
6.3
Medium
Athiwat Tiprasaharn (Jitlada)Yes
2025-11-20 18:41CVE-2025-11456
9.8
Critical
ifoundbugYes
2025-11-20 17:01CVE-2025-12023
4.3
Medium
Athiwat Tiprasaharn (Jitlada)Yes
2025-11-20 17:00CVE-2025-12085
4.3
Medium
Athiwat Tiprasaharn (Jitlada)Yes
2025-11-20 16:58CVE-2025-12022
4.3
Medium
Athiwat Tiprasaharn (Jitlada)Yes
2025-11-20 16:58CVE-2025-12169
4.3
Medium
Legion HunterYes
Showing 1–10 of 14 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C