ELEX WordPress HelpDesk & Customer Ticketing System
ELEXtensions
Developer
3.3.8
Latest version
200
Installations
No date
Last updated
Vulnerability history
0 present
15 patched
7 Mitigation rules
- Unauthenticated Arbitrary File Upload vulnerability<= 3.3.715/10/2026
- SQL Injection vulnerability<= 3.3.602/06/2026
- Missing Authorization to Authenticated (Subscriber+) Settings Update vulnerability<= 3.3.504/02/2026
- Broken Access Control vulnerability<= 3.3.527/01/2026
- Missing Authorization to Authenticated (Subscriber+) Trash Empty vulnerability<= 3.3.131/12/2025
- Missing Authorization to Authenticated (Subscriber+) Ticket Restore vulnerability<= 3.3.131/12/2025
- Missing Authorization to Authenticated (Subscriber+) Trash Restore vulnerability<= 3.3.131/12/2025
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 3.3.431/12/2025
- Authenticated (Contributor+) Privilege Escalation via eh_crm_edit_agent AJAX Action vulnerability<= 3.3.202/12/2025
- Unauthenticated Arbitrary File Upload vulnerability<= 3.3.124/11/2025
- Missing Authorization to Authenticated (Subscriber+) Role Removal vulnerability<= 3.3.121/11/2025
- Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_client' vulnerability<= 3.2.921/11/2025
- Missing Authorization to Authenitcated (Subscriber+) to Scheduled Trigger Deletion vulnerability<= 3.3.020/11/2025
- Arbitrary File Upload vulnerability<= 3.2.908/05/2025
- Missing Authorization to Authenticated (Subscriber+) Privilege Escalation vulnerability<= 3.2.631/01/2025