CVE-2025-10054

The CVE-2025-10054 entry concerns the ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress. The vulnerability arises from a missing capability check in the eh_crm_remove_agent function across versions up to 3.3.1, enabling authenticated users with Subscriber-level access and a...

PT-2025-47728

Name of the Vulnerable Software and Affected Versions ELEX WordPress HelpDesk & Customer Ticketing System plugin versions through 3.3.1 Description The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress has a flaw that allows unauthorized data modification. A missing...