Vendor

    ELEXtensions

    30 known vulnerabilities in products by ELEXtensions, 0 of them actively exploited (CISA KEV).

    Key figures

    30

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in ELEXtensions
    CriticalCVE-2026-103768

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Unrestricted Upload of File with Dangerous Type

    		9.8
    CriticalCVE-2025-11456

    ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Unauthenticated Arbitrary File Upload

    also in 1 other product

    		9.8
    CriticalCVE-2026-40800

    SQL Injection (CVE-2026-40800)

    		9.3
    CriticalCVE-2026-114630

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Path Traversal

    		9.1
    CriticalCVE-2025-47658

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Unrestricted Upload of File with Dangerous Type

    also in 1 other product

    		9.9
    HighCVE-2025-22352

    SQL Injection (CVE-2025-22352)

    		7.6
    HighCVE-2026-48964

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: SQL Injection

    		8.5
    HighCVE-2024-12171

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization

    also in 1 other product

    		8.8
    CriticalCVE-2025-53213

    ELEXtensions ReachShip WooCommerce Multi-Carrier & Conditional Shipping: Unrestricted Upload of File with Dangerous Type

    		9.9
    HighCVE-2025-47645

    SQL Injection (CVE-2025-47645)

    		8.5
    MediumCVE-2025-10046

    ELEXtensions ELEX WooCommerce Google Shopping (Google Product Feed): SQL Injection

    		4.9
    MediumCVE-2026-103083

    Authorization Bypass Through User-Controlled Key (CVE-2026-103083)

    		5.4
    HighCVE-2025-47643

    WordPress ELEX Product Feed for WooCommerce <= 3.1.2 - SQL Injection Vulnerability

    		7.6
    MediumCVE-2025-68837

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization

    		6.5
    MediumCVE-2025-3280

    SQL Injection (CVE-2025-3280)

    		6.5
    HighCVE-2025-9343

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Cross-site Scripting

    		7.2
    HighCVE-2025-13534

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Improper Privilege Management

    also in 1 other product

    		6.3
    MediumCVE-2024-12266

    ELEX WooCommerce Dynamic Pricing and Discounts <= 2.1.7 - Missing Authorization

    		6.5
    HighCVE-2024-31255

    ELEXtensions ELEX WooCommerce Dynamic Pricing and Discounts: Cross-site Scripting

    		7.1
    MediumCVE-2025-14079

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization

    		5.3
    MediumCVE-2025-10039

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Authorization Bypass Through User-Controlled Key

    also in 1 other product

    		4.3
    MediumCVE-2025-10054

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization

    also in 1 other product

    		4.3
    MediumCVE-2025-31406

    WordPress ELEX WooCommerce Request a Quote plugin <= 2.3.9 - Broken Access Control vulnerability

    		4.3
    MediumCVE-2025-12751

    ELEXtensions WSChat: Missing Authorization

    		4.3
    MediumCVE-2025-12023

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization

    also in 1 other product

    		4.3

    All vulnerabilities in search

    Products

    Products by ELEXtensions
    Elex Wordpress Helpdesk & Customer Ticketing System160
    Elex Woocommerce Advanced Bulk Edit Products, Prices & Attributes40
    Elex Woocommerce Dynamic Pricing And Discounts40