ELEX WordPress HelpDesk & Customer Ticketing System

ELEX WordPress HelpDesk & Customer Ticketing System has 14 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 14 are fixed as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 3 high. 2025 was the busiest year with 11 disclosures.

The most common weakness is Missing Authorization, behind 8 of the records (57%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type, Authorization Bypass Through User-Controlled Key.

Every one of the 14 issues recorded for ELEX WordPress HelpDesk & Customer Ticketing System has a vendor fix available, so running the current release closes all known holes.

9 independent researchers contributed these findings, most of them (6) reported by Athiwat Tiprasaharn (Jitlada). ELEX WordPress HelpDesk & Customer Ticketing System is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

01234567891027.05.2020Today31.01.20258.8ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation CVSS 8.8 · 31.01.202508.05.20258.8ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.9 - Authenticated (Subscriber+) Arbitrary File Upload CVSS 8.8 · 08.05.202520.11.20254.3ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Role Removal CVSS 4.3 · 20.11.20254.3ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.9 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_client' CVSS 4.3 · 20.11.20254.3ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Restore CVSS 4.3 · 20.11.20254.3ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.0 - Missing Authorization to Authenitcated (Subscriber+) to Scheduled Trigger Deletion CVSS 4.3 · 20.11.20254.3ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Empty CVSS 4.3 · 20.11.20254.3ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Ticket Restore CVSS 4.3 · 20.11.20259.8ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Unauthenticated Arbitrary File Upload CVSS 9.8 · 20.11.202501.12.20256.3ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.2 - Authenticated (Contributor+) Privilege Escalation via eh_crm_edit_agent AJAX Action CVSS 6.3 · 01.12.202520.12.20257.2ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.4 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 20.12.202527.01.20264.3ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.5 - Missing Authorization CVSS 4.3 · 27.01.202604.02.20265.3ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.5 - Missing Authorization to Authenticated (Subscriber+) Settings Update CVSS 5.3 · 04.02.202602.06.20266.5ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.6 - Authenticated (Subscriber+) SQL Injection CVSS 6.5 · 02.06.2026

Strategic Overview

Avg CVSSMedium
5.9/ 10
Patch Coverage100%
Open

0

Fixed

14

Get automatic notifications for all ELEX WordPress HelpDesk & Customer Ticketing System vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2025-11456

ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Unauthenticated Arbitrary File Upload

Read the full analysis

Vulnerability Records

14 records
2026-06-02 00:00CVE-2026-48964
6.5
Medium
Mukhlis AmienYes
2026-02-04 20:43CVE-2025-14079
5.3
Medium
Itthidej Aramsri (Boeing777)Yes
2026-01-27 00:00CVE-2025-68837
4.3
Medium
benzdeusYes
2025-12-20 14:59CVE-2025-9343
7.2
High
Athiwat Tiprasaharn (Jitlada)Yes
2025-12-01 00:00CVE-2025-13534
6.3
Medium
Athiwat Tiprasaharn (Jitlada)Yes
2025-11-20 18:41CVE-2025-11456
9.8
Critical
ifoundbugYes
2025-11-20 17:01CVE-2025-12023
4.3
Medium
Athiwat Tiprasaharn (Jitlada)Yes
2025-11-20 17:00CVE-2025-12085
4.3
Medium
Athiwat Tiprasaharn (Jitlada)Yes
2025-11-20 16:58CVE-2025-12022
4.3
Medium
Athiwat Tiprasaharn (Jitlada)Yes
2025-11-20 16:58CVE-2025-12169
4.3
Medium
Legion HunterYes
Showing 1–10 of 14 reports
ELEX WordPress HelpDesk & Customer Ticketing System banner
Latestv3.3.7

ELEX WordPress HelpDesk & Customer Ticketing System

ELEXtensions

Author

ELEXtensions

3.9(7)
78/100
Last Updated
2026-05-20 (4mo ago)
Active Installs
300+
Downloads
24,643
Requires WP
3.0.1+
Requires PHP
7.1.8+
Tested up to
WP 6.9.7
Created
2020-05-27 (6y ago)

ELEX WordPress HelpDesk & Customer Ticketing System offers top-notch features for the best customer support experience. With this plugin, receive all your customer queries, issues, and suggestions in the form of tickets. The plugin is boosted with unlimited tickets, unlimited agents and has features like supervisor profiles, email piping, auto-tagging tickets, auto-assigning tickets, custom ticket submission form, email filtering, email blocking, triggers & automation, quick reply templates, agents’ satisfaction rating and customer feedback and much more! Unlike other SaaS-based plugins, ELEX WordPress HelpDesk Plugin does not store your data in the cloud. Rather, all your data is stored on your system, making it one of the best WordPress support desk plugin in the market. Data privacy is one less thing to worry about with ELEX WordPress HelpDesk Plugin! Features Unlimited Tickets & Agents Simple & Intuitive Interface Custom Ticket Views Essential Triggers & Automation Email Piping Canned Responses & Rich Text Detailed Visual Reports Backup & Restore Easy Digital Downloads (EDD) Integration Pay For Support Integration – Accept Payment for the Support Services Agent Signatures using Addons Send SMS Notifications using Addons Seamlessly integrated to WooCommerce Lots of customisation options How to use WSDesk – WordPress HelpDesk & Support Ticket Plugin – Video [https://www.youtube.com/watch?v=EF33WP3BGgw&t=2s] [Premium] Fully Managed WSDesk – ELEX WordPress Help Desk & Customer Support Ticketing Plugin For complete list of latest features and details, please visit WSDesk – ELEX WordPress Help Desk & Customer Support Ticketing Plugin Product page. Agent Satisfaction Score. OpenAI ChatGPT Integration for Auto-Generated Replies. WooCommerce Integration. Show total number of orders, Order number, Total purchase price, etc on the ticket details. Multiple Triggers & Automations. Auto-Tagging And Assigning. Archive Tickets Agent Notifications Automated Emails. Convert your unread emails to tickets using Outlook Oauth. Send SMS Notifications to the Customers. WSChat – WordPress Live Chat Plugin Integration. Google Chat Integration. Import Zendesk Tickets. Knowledge Base Integration. Accept Payment for Support & Convert to Credits using Pay for Suppoer AddOn. Timely compatibility updates and bug fixes. Premium Support! Why choose ELEX WordPress HelpDesk Plugin? Offering excellent customer support is critical for the success of any organization. ELEX WordPress HelpDesk Plugin has been designed keeping into consideration every issue we have faced in the process of finding the right support system for our website. Apart from being very easy to use, this plugin offers all the essential features required for a helpdesk system. It is light and AJAX-based, thus it won’t interfere with your website’s loading speed. What is a Help Desk or Support Ticket System? In customer service parlance, a ticketing system or support ticket system is a software that takes all incoming customer support requests, creates a unique customer service ticket and then routes it through a defined customer support process based on the SLA. People call it different names such as Support Ticket System, Customer Support System, Service Desk, Support Ticketing System, IT help desk or Support Desk Software. But ultimately, a help desk software typically allows the support team to manage, track, sort, and search for issues (user queries) making ticket management much easier for the agent to help the customer more quickly solve the issue to their satisfaction. Why you need a support ticket system to handle customer support? Better customer experience starts with better help desk software. It can turn support tickets into amazing customer experiences. The helpdesk system enables support agents to track, prioritize, and solve customer support tickets. A great help desk is at the heart of great customer support. Help desk software helps streamline customer support with time-saving tools like triggers and automation. It’s intuitive and easy to use because it’s built with both customers and support desk agents in mind. A help desk’s shared inbox enables the support team to collaborate and resolve issues without worrying about overlapping or missing support requests. Every request sent to the support email becomes a ticket in the helpdesk. Support tickets can be easily categorized and prioritized and then assigned to the right people in the support team. Issues such as multiple agents responding to the same ticket or missing some of the tickets are taken care of as each support agent can see who is working on what ticket and it’s status. It time to get started with a customer support ticket system if you already don’t have one. Benefits of open-source helpdesk software An open-source help desk allows developers to access its source code, as opposed to proprietary software. So, an open-source helpdesk can be modified or enhanced beyond the level of simple integration and adding plugins. Developers can add features or modify processes or fix bugs in the system. ELEX WordPress Helpdesk plugin is an open-source support ticketing system that works with WordPress and WooCommerce. This is the best helpdesk software available for WordPress/WooCommerce platform if the usability and customer support are considered.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C