Product by ELEXtensions
Elex Wordpress Helpdesk & Customer Ticketing System
16 known vulnerabilities in Elex Wordpress Helpdesk & Customer Ticketing System (ELEXtensions), 0 of them actively exploited (CISA KEV).
Key figures
16
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-103768 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Unrestricted Upload of File with Dangerous Type | 9.8 | |
| Critical | CVE-2025-11456 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Unauthenticated Arbitrary File Upload | 9.8 | |
| Critical | CVE-2026-114630 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Path Traversal | 9.1 | |
| Critical | CVE-2025-47658 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Unrestricted Upload of File with Dangerous Type | 9.9 | |
| High | CVE-2026-48964 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: SQL Injection | 8.5 | |
| High | CVE-2024-12171 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization | 8.8 | |
| Medium | CVE-2025-68837 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization | 6.5 | |
| High | CVE-2025-9343 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Cross-site Scripting | 7.2 | |
| High | CVE-2025-13534 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Improper Privilege Management | 6.3 | |
| Medium | CVE-2025-14079 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization | 5.3 | |
| Medium | CVE-2025-10039 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Authorization Bypass Through User-Controlled Key | 4.3 | |
| Medium | CVE-2025-10054 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization | 4.3 | |
| Medium | CVE-2025-12023 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization | 4.3 | |
| Medium | CVE-2025-12169 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization | 4.3 | |
| Medium | CVE-2025-12022 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization | 4.3 | |
| Medium | CVE-2025-12085 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization | 4.3 |