Product by ELEXtensions

    Elex Wordpress Helpdesk & Customer Ticketing System

    16 known vulnerabilities in Elex Wordpress Helpdesk & Customer Ticketing System (ELEXtensions), 0 of them actively exploited (CISA KEV).

    Key figures

    16

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Elex Wordpress Helpdesk & Customer Ticketing System (ELEXtensions)
    CriticalCVE-2026-103768

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Unrestricted Upload of File with Dangerous Type

    9.8
    CriticalCVE-2025-11456

    ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Unauthenticated Arbitrary File Upload

    also in 1 other product

    9.8
    CriticalCVE-2026-114630

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Path Traversal

    9.1
    CriticalCVE-2025-47658

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Unrestricted Upload of File with Dangerous Type

    also in 1 other product

    9.9
    HighCVE-2026-48964

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: SQL Injection

    8.5
    HighCVE-2024-12171

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization

    also in 1 other product

    8.8
    MediumCVE-2025-68837

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization

    6.5
    HighCVE-2025-9343

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Cross-site Scripting

    7.2
    HighCVE-2025-13534

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Improper Privilege Management

    also in 1 other product

    6.3
    MediumCVE-2025-14079

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization

    5.3
    MediumCVE-2025-10039

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Authorization Bypass Through User-Controlled Key

    also in 1 other product

    4.3
    MediumCVE-2025-10054

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization

    also in 1 other product

    4.3
    MediumCVE-2025-12023

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization

    also in 1 other product

    4.3
    MediumCVE-2025-12169

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization

    also in 1 other product

    4.3
    MediumCVE-2025-12022

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization

    also in 1 other product

    4.3
    MediumCVE-2025-12085

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization

    also in 1 other product

    4.3

    All products by ELEXtensions