Product by ELEXtensions
ELEX WordPress HelpDesk & Customer Ticketing System
10 known vulnerabilities in ELEX WordPress HelpDesk & Customer Ticketing System (ELEXtensions), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-11456 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Unauthenticated Arbitrary File Upload | 9.8 | |
| Critical | CVE-2025-47658 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Unrestricted Upload of File with Dangerous Type | 9.9 | |
| High | CVE-2024-12171 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization | 8.8 | |
| High | CVE-2025-13534 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Improper Privilege Management | 6.3 | |
| Medium | CVE-2025-10039 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Authorization Bypass Through User-Controlled Key | 4.3 | |
| Medium | CVE-2025-10054 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization | 4.3 | |
| Medium | CVE-2025-12169 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization | 4.3 | |
| Medium | CVE-2025-12023 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization | 4.3 | |
| Medium | CVE-2025-12022 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization | 4.3 | |
| Medium | CVE-2025-12085 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Missing Authorization | 4.3 |