Login Request a demo
EL
Vendor
elextensions
9 products with CVEs on record
29
CVEs
0
On KEV
3
New 30D
Products
EW
ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes
ELEXtensions
9.3
4 CVEs0 on KEV2 new
EW
ELEX WordPress HelpDesk & Customer Ticketing System
elextensions
9.8
15 CVEs0 on KEV1 new
EW
ELEX WooCommerce Dynamic Pricing and Discounts
elextensions
7.1
4 CVEs0 on KEV0 new
EP
ELEX Product Feed for WooCommerce
ELEXtensions
7.6
1 CVEs0 on KEV0 new
EW
ELEX WooCommerce Bulk Edit Products, Prices & Attributes (Basic)
elextensions
6.5
1 CVEs0 on KEV0 new
EW
ELEX WooCommerce Google Shopping (Google Product Feed)
elextensions
4.9
1 CVEs0 on KEV0 new
EW
ELEX WooCommerce Request a Quote
ELEXtensions
4.3
1 CVEs0 on KEV0 new
RW
ReachShip WooCommerce Multi-Carrier & Conditional Shipping
ELEXtensions
9.9
1 CVEs0 on KEV0 new
WW
WSChat – WordPress Live Chat
elextensions
4.3
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-103768
EW
ELEX WordPress HelpDesk & Customer Ticketing System
elextensions
9.8
1%
Oct 16ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.7 - Unauthenticated Arbitrary File Upload via IMAP Email Attachment
CVE-2026-103083
EW
ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes
ELEXtensions
5.4
0%
Oct 15WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-40800
EW
ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes
ELEXtensions
9.3
0%
Oct 10WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - SQL Injection vulnerability
CVE-2026-48964
EW
ELEX WordPress HelpDesk & Customer Ticketing System
ELEXtensions
8.5
0%
Jun 15WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.6 - SQL Injection vulnerability
CVE-2025-68837
EW
ELEX WordPress HelpDesk & Customer Ticketing System
ELEXtensions
6.5
0%
Feb 20WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.5 - Broken Access Control vulnerability
CVE-2025-14079
EW
ELEX WordPress HelpDesk & Customer Ticketing System
elextensions
5.3
0%
Feb 5ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.5 - Missing Authorization to Authenticated (Subscriber+) Settings Update
CVE-2025-9343
EW
ELEX WordPress HelpDesk & Customer Ticketing System
elextensions
7.2
0%
Dec 21ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.4 - Unauthenticated Stored Cross-Site Scripting
CVE-2025-13534
EW
ELEX WordPress HelpDesk & Customer Ticketing System
elextensions
8.8
0%
Dec 2ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.2 - Authenticated (Contributor+) Privilege Escalation via eh_crm_edit_agent AJAX Action
CVE-2025-10039
EW
ELEX WordPress HelpDesk & Customer Ticketing System
elextensions
4.3
0%
Nov 21ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.9 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_client'
CVE-2025-10054
EW
ELEX WordPress HelpDesk & Customer Ticketing System
elextensions
4.3
0%
Nov 21ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Role Removal
CVE-2025-11456
EW
ELEX WordPress HelpDesk & Customer Ticketing System
elextensions
9.8
1%
Nov 21ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Unauthenticated Arbitrary File Upload
CVE-2025-12169
EW
ELEX WordPress HelpDesk & Customer Ticketing System
elextensions
4.3
0%
Nov 21ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.0 - Missing Authorization to Authenitcated (Subscriber+) to Scheduled Trigger Deletion
CVE-2025-12022
EW
ELEX WordPress HelpDesk & Customer Ticketing System
elextensions
4.3
0%
Nov 21ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Restore
CVE-2025-12085
EW
ELEX WordPress HelpDesk & Customer Ticketing System
elextensions
4.3
0%
Nov 21ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Empty
CVE-2025-12023
EW
ELEX WordPress HelpDesk & Customer Ticketing System
elextensions
4.3
0%
Nov 21ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Ticket Restore
CVE-2025-12751
WW
WSChat – WordPress Live Chat
elextensions
4.3
0%
Nov 19WSChat – WordPress Live Chat <= 3.1.6 - Missing Authorization to Authenticated (Subscriber+) Settings Reset
CVE-2025-10046
EW
ELEX WooCommerce Google Shopping (Google Product Feed)
elextensions
4.9
1%
Sep 6ELEX WooCommerce Google Shopping (Google Product Feed) <= 1.4.3 - Authenticated (Admin+) SQL Inejction
CVE-2025-53213
RW
ReachShip WooCommerce Multi-Carrier & Conditional Shipping
ELEXtensions
9.9
0%
Aug 20WordPress ReachShip WooCommerce Multi-Carrier & Conditional Shipping <= 4.3.1 - Arbitrary File Upload Vulnerability
CVE-2025-47645
EW
ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes
ELEXtensions
8.5
0%
Jul 16WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.4.9 - Subscriber+ SQL Injection vulnerability
CVE-2025-47658
EW
ELEX WordPress HelpDesk & Customer Ticketing System
ELEXtensions
8.8
0%
May 23WordPress ELEX HelpDesk & Customer Ticketing System plugin <= 3.2.9 - Arbitrary File Upload vulnerability
CVE-2025-47643
EP
ELEX Product Feed for WooCommerce
ELEXtensions
7.6
0%
May 7WordPress ELEX Product Feed for WooCommerce <= 3.1.2 - SQL Injection Vulnerability
CVE-2025-3280
EW
ELEX WooCommerce Bulk Edit Products, Prices & Attributes (Basic)
elextensions
6.5
0%
Apr 24ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.4.9 - Authenticated (Subscriber+) SQL Injection
CVE-2025-31406
EW
ELEX WooCommerce Request a Quote
ELEXtensions
4.3
0%
Mar 31WordPress ELEX WooCommerce Request a Quote plugin <= 2.3.9 - Broken Access Control vulnerability
CVE-2024-12171
EW
ELEX WordPress HelpDesk & Customer Ticketing System
elextensions
8.8
1%
Feb 1ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
CVE-2025-22352
EW
ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes
ELEXtensions
7.6
1%
Jan 7WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes Plugin <= 1.4.9 - SQL Injection vulnerability
CVE-2024-12266
EW
ELEX WooCommerce Dynamic Pricing and Discounts
elextensions
6.5
0%
Dec 24ELEX WooCommerce Dynamic Pricing and Discounts <= 2.1.7 - Missing Authorization
CVE-2024-31364
EW
ELEX WooCommerce Dynamic Pricing and Discounts
ELEXtensions
4.3
0%
Apr 12WordPress ELEX WooCommerce Dynamic Pricing and Discounts plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-32105
EW
ELEX WooCommerce Dynamic Pricing and Discounts
ELEXtensions
4.3
0%
Apr 11WordPress ELEX WooCommerce Dynamic Pricing and Discounts plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-31255
EW
ELEX WooCommerce Dynamic Pricing and Discounts
ELEXtensions
7.1
0%
Apr 7WordPress ELEX WooCommerce Dynamic Pricing and Discounts plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability