ELEX WordPress HelpDesk & Customer Ticketing System
ELEXtensions
Developer
3.3.6
Latest version
300
Installations
No date
Last updated
Vulnerability history
0 present
13 fixed
6 Mitigation rules
- Missing Authorization to Authenticated (Subscriber+) Settings Update vulnerability<= 3.3.5Feb 4, 2026
- Broken Access Control vulnerability<= 3.3.5Jan 27, 2026
- Missing Authorization to Authenticated (Subscriber+) Trash Empty vulnerability<= 3.3.1Dec 31, 2025
- Missing Authorization to Authenticated (Subscriber+) Ticket Restore vulnerability<= 3.3.1Dec 31, 2025
- Missing Authorization to Authenticated (Subscriber+) Trash Restore vulnerability<= 3.3.1Dec 31, 2025
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 3.3.4Dec 31, 2025
- Authenticated (Contributor+) Privilege Escalation via eh_crm_edit_agent AJAX Action vulnerability<= 3.3.2Dec 2, 2025
- Unauthenticated Arbitrary File Upload vulnerability<= 3.3.1Nov 24, 2025
- Missing Authorization to Authenticated (Subscriber+) Role Removal vulnerability<= 3.3.1Nov 21, 2025
- Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_client' vulnerability<= 3.2.9Nov 21, 2025
- Missing Authorization to Authenitcated (Subscriber+) to Scheduled Trigger Deletion vulnerability<= 3.3.0Nov 20, 2025
- Arbitrary File Upload vulnerability<= 3.2.9May 8, 2025
- Missing Authorization to Authenticated (Subscriber+) Privilege Escalation vulnerability<= 3.2.6Jan 31, 2025