EW
Product
ELEX WordPress HelpDesk & Customer Ticketing System
15
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 5Medium 8Low 0
Watch
Add ELEX WordPress HelpDesk & Customer Ticketing System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-68837 | 6.5 | Feb 20 | WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.5 - Broken Access Control vulnerability Affected: through 3.3.5 |
| CVE-2025-14079 | 5.3 | Feb 5 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.5 - Missing Authorization to Authenticated (Subscriber+) Settings Update Affected: through 3.3.5 |
| CVE-2025-10039 | 4.3 | Nov 21 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.9 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_client' Affected: through 3.2.9 |
| CVE-2025-10054 | 4.3 | Nov 21 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Role Removal Affected: through 3.3.1 |
| CVE-2025-12169 | 4.3 | Nov 21 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.0 - Missing Authorization to Authenitcated (Subscriber+) to Scheduled Trigger Deletion Affected: through 3.3.0 |
| CVE-2025-12022 | 4.3 | Nov 21 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Restore Affected: through 3.3.1 |
| CVE-2025-12085 | 4.3 | Nov 21 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Empty Affected: through 3.3.1 |
| CVE-2025-12023 | 4.3 | Nov 21 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Ticket Restore Affected: through 3.3.1 |
Showing 8