Plugin icon

ELEX WordPress HelpDesk & Customer Ticketing System

elex-helpdesk-customer-support-ticket-system

Vulnerabilities:

15

Last Updated:

October 30, 2026

Active Installs:

200

Published
Title
Fixed in
CVSS
Published
2026-10-15
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.8 - Unauthenticated Arbitrary File Upload via IMAP Email Attachment
Fixed in
Fixed in 3.3.8
CVSS
9.8 (critical)
Published
2026-06-02
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.7 - Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 3.3.7
CVSS
6.5 (medium)
Published
2026-02-04
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.6 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Fixed in
Fixed in 3.3.6
CVSS
5.3 (medium)
Published
2026-01-27
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.6 - Missing Authorization
Fixed in
Fixed in 3.3.6
CVSS
4.3 (medium)
Published
2025-12-20
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.5 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 3.3.5
CVSS
7.2 (high)
Published
2025-12-01
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.3 - Authenticated (Contributor+) Privilege Escalation via eh_crm_edit_agent AJAX Action
Fixed in
Fixed in 3.3.3
CVSS
6.3 (medium)
Published
2025-11-20
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.2 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 3.3.2
CVSS
9.8 (critical)
Published
2025-11-20
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.2 - Missing Authorization to Authenticated (Subscriber+) Ticket Restore
Fixed in
Fixed in 3.3.2
CVSS
4.3 (medium)
Published
2025-11-20
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.2 - Missing Authorization to Authenticated (Subscriber+) Trash Empty
Fixed in
Fixed in 3.3.2
CVSS
4.3 (medium)
Published
2025-11-20
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.2 - Missing Authorization to Authenticated (Subscriber+) Trash Restore
Fixed in
Fixed in 3.3.2
CVSS
4.3 (medium)
Published
2025-11-20
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.1 - Missing Authorization to Authenitcated (Subscriber+) to Scheduled Trigger Deletion
Fixed in
Fixed in 3.3.1
CVSS
4.3 (medium)
Published
2025-11-20
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.2 - Missing Authorization to Authenticated (Subscriber+) Role Removal
Fixed in
Fixed in 3.3.2
CVSS
4.3 (medium)
Published
2025-11-20
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.0 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_client'
Fixed in
Fixed in 3.3.0
CVSS
4.3 (medium)
Published
2025-05-08
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.0 - Subscriber+ Arbitrary File Upload
Fixed in
Fixed in 3.3.0
CVSS
8.8 (high)
Published
2025-01-31
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.2.7 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Fixed in
Fixed in 3.2.7
CVSS
8.8 (high)