WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
elex-helpdesk-customer-support-ticket-system
Published
2025-11-20
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.2 - Missing Authorization to Authenticated (Subscriber+) Trash Empty
Slug
elex-helpdesk-customer-support-ticket-system
Published
2025-11-20
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.2 - Missing Authorization to Authenticated (Subscriber+) Trash Restore
Slug
elex-helpdesk-customer-support-ticket-system
Published
2025-11-20
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.1 - Missing Authorization to Authenitcated (Subscriber+) to Scheduled Trigger Deletion
Slug
elex-helpdesk-customer-support-ticket-system
Published
2025-11-20
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.2 - Unauthenticated Arbitrary File Upload
Slug
elex-helpdesk-customer-support-ticket-system
Published
2025-11-20
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.2 - Missing Authorization to Authenticated (Subscriber+) Role Removal
Slug
elex-helpdesk-customer-support-ticket-system
Published
2025-11-20
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.0 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_client'
Slug
elex-helpdesk-customer-support-ticket-system
Published
2025-12-01
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.3 - Authenticated (Contributor+) Privilege Escalation via eh_crm_edit_agent AJAX Action
Slug
elex-helpdesk-customer-support-ticket-system
Published
2025-12-20
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.5 - Unauthenticated Stored Cross-Site Scripting
Slug
elex-helpdesk-customer-support-ticket-system
Published
2026-01-27
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.6 - Missing Authorization
Slug
elex-helpdesk-customer-support-ticket-system
Published
2026-02-04
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.6 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
elex-product-feed
Published
2025-05-07
Title
ELEX Product Feed for WooCommerce < 3.1.3 - Admin+ SQL Injection
Slug
elex-reachship-multi-carrier-conditional-shipping
Published
2025-07-22
Title
ReachShip WooCommerce Multi-Carrier & Conditional Shipping < 4.3.2 - Authenticated (Contributor+) Arbitrary File Upload
Slug
elex-request-a-quote
Published
2025-03-31
Title
ELEX WooCommerce Request a Quote <= 2.3.9 - Missing Authorization
Slug
elex-woocommerce-dynamic-pricing-and-discounts
Published
2024-04-05
Title
ELEX WooCommerce Dynamic Pricing and Discounts < 2.1.3 - Reflected Cross-Site Scripting
Slug
elex-woocommerce-dynamic-pricing-and-discounts
Published
2024-04-08
Title
ELEX WooCommerce Dynamic Pricing and Discounts < 2.1.3 - Cross-Site Request Forgery
Slug
elex-woocommerce-dynamic-pricing-and-discounts
Published
2024-04-11
Title
ELEX WooCommerce Dynamic Pricing and Discounts < 2.1.3 - Cross-Site Request Forgery
Slug
elex-woocommerce-dynamic-pricing-and-discounts
Published
2024-12-23
Title
ELEX WooCommerce Dynamic Pricing and Discounts < 2.1.8 - Missing Authorization
Slug
elex-woocommerce-google-product-feed-plugin-basic
Published
2021-09-06
Title
ELEX WooCommerce Google Shopping < 1.2.4 - Reflected Cross-Site Scripting (XSS)
Slug
elex-woocommerce-google-product-feed-plugin-basic
Published
2025-09-05
Title
ELEX WooCommerce Google Shopping (Google Product Feed) < 1.4.4 - Authenticated (Admin+) SQL Inejction
Slug
elfsight-contact-form
Published
2025-06-04
Title
elfsight Contact Form widget <= 2.3.1 - Unauthenticated Information Exposure
Slug
elfsight-pricing-table
Published
2024-07-08
Title
Pricing Table <= 2.0.1 - Cross-Site Request Forgery via ajax()
Slug
elfsight-pricing-table
Published
2024-07-08
Title
Pricing Table <= 2.0.1 - Missing Authorization
Slug
elfsight-telegram-chat-cc
Published
2024-11-18
Title
Elfsight Telegram Chat CC <= 1.1.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
elfsight-testimonials-slider
Published
2025-03-31
Title
Elfsight Testimonials Slider <= 1.0.1 - Missing Authorization
Slug
elfsight-testimonials-slider
Published
2025-03-31
Title
Elfsight Testimonials Slider <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting