WS
Product
Wsdesk
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 6Low 0
Watch
Add Wsdesk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-11456 | 9.8 | Nov 21 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Unauthenticated Arbitrary File Upload Affected: before 3.3.2 |
| CVE-2025-13534 | 8.8 | Dec 2 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.2 - Authenticated (Contributor+) Privilege Escalation via eh_crm_edit_agent AJAX Action Affected: before 3.3.3 |
| CVE-2025-47658 | 8.8 | May 23 | WordPress ELEX HelpDesk & Customer Ticketing System plugin <= 3.2.9 - Arbitrary File Upload vulnerability Affected: before 3.3.0 |
| CVE-2024-12171 | 8.8 | Feb 1 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation Affected: before 3.2.7 |
| CVE-2025-10039 | 4.3 | Nov 21 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.9 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_client' Affected: before 3.3.0 |
| CVE-2025-10054 | 4.3 | Nov 21 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Role Removal Affected: before 3.3.2 |
| CVE-2025-12169 | 4.3 | Nov 21 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.0 - Missing Authorization to Authenitcated (Subscriber+) to Scheduled Trigger Deletion Affected: before 3.3.1 |
| CVE-2025-12022 | 4.3 | Nov 21 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Restore Affected: before 3.3.2 |
| CVE-2025-12085 | 4.3 | Nov 21 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Empty Affected: before 3.3.2 |
| CVE-2025-12023 | 4.3 | Nov 21 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Ticket Restore Affected: before 3.3.2 |
Showing 10