Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

187 matches found

Kitploit
Kitploit•added 2026/08/28 6:53 a.m.•3 views

CVE-2025-22352

1️⃣ Tipo di componente WordPress plugin 2️⃣ Dettagli del componente Nome del componente ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes Versione vulnerabile = 1.4.8 Slug del componente elex-bulk-edit-products-prices-attributes-for-woocommerce-basic Link del componente...

7.6CVSS7.3AI score0.00732EPSS
SaveExploits1
Kitploit
Kitploit•added 2026/08/27 11:55 p.m.•3 views

CVE-2025-10046

CVE-2025-10046 - ELEX WooCommerce Google Shopping Autor: Byte Reaper Beschreibung CVE-2025-10046 ist eine SQL-Injection-Schwachstelle im ELEX WooCommerce Google Shopping Product Feed Plugin für WordPress, Version 1.4.3 und früher. Das Problem befindet sich in der Datei...

4.9CVSS5.3AI score0.00714EPSS
SaveExploits2
NVD
NVD•added 2026/06/15 9:17 p.m.•21 views

CVE-2026-48964

Subscriber SQL Injection in ELEX WordPress HelpDesk & Customer Ticketing System = 3.3.6 versions...

8.5CVSS0.00332EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/06/15 8:19 p.m.•11 views

CVE-2026-48964 WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.6 - SQL Injection vulnerability

Subscriber SQL Injection in ELEX WordPress HelpDesk & Customer Ticketing System = 3.3.6 versions...

8.5CVSS5.7AI score0.00332EPSS
SaveExploits0References1
CVE
CVE•added 2026/06/15 8:19 p.m.•31 views

CVE-2026-48964

CVE-2026-48964 affects the WordPress ELEX HelpDesk & Customer Ticketing System plugin (versions

8.5CVSS5.7AI score0.00332EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/06/15 8:19 p.m.•37 views

CVE-2026-48964 WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.6 - SQL Injection vulnerability

Subscriber SQL Injection in ELEX WordPress HelpDesk & Customer Ticketing System = 3.3.6 versions...

8.5CVSS0.00332EPSS
SaveExploits0References1
Patchstack
Patchstack•added 2026/06/02 2:40 p.m.•16 views

WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Mukhlis Amien in WordPress Plugin ELEX WordPress HelpDesk & Customer Ticketing System versions = 3.3.6...

8.5CVSS5.9AI score0.00332EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE•added 2026/02/21 7:30 p.m.•13 views

CVE-2025-68837

Missing Authorization vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from...

6.5CVSS5.5AI score0.00248EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/02/20 3:46 p.m.•31 views

CVE-2025-68837 WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from...

6.5CVSS0.00248EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/02/20 3:46 p.m.•5 views

CVE-2025-68837 WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from...

6.5CVSS5.3AI score0.00248EPSS
SaveExploits0References1
CVE
CVE•added 2026/02/20 3:46 p.m.•18 views

CVE-2025-68837

CVE-2025-68837 affects ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System (plugin) up to and including version 3.3.5, with a Missing Authorization / Broken Access Control vulnerability. The issue allows exploitation of incorrectly configured access control security levels (as descri...

6.5CVSS5.5AI score0.00248EPSS
SaveExploits0References1
CNNVD
CNNVD•added 2026/02/20 12:00 a.m.•16 views

WordPress plugin ELEX WordPress HelpDesk & Customer Ticketing System 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.5CVSS5.8AI score0.00248EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2026/02/20 12:00 a.m.•15 views

PT-2026-21102

Name of the Vulnerable Software and Affected Versions ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System versions through 3.3.5 Description The ELEX WordPress HelpDesk & Customer Ticketing System has a flaw related to incorrectly configured access control security levels, potentiall...

5.4AI score0.00248EPSS
SaveExploits0References3
CNVD
CNVD•added 2026/02/11 12:00 a.m.•13 views

Unspecified Vulnerability in WordPress Plugin ELEX WordPress HelpDesk & Customer Ticketing System

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin ELEX WordPress HelpDesk & Customer...

5.3CVSS5.8AI score0.00268EPSS
SaveExploits0
RedhatCVE
RedhatCVE•added 2026/02/06 1:30 p.m.•20 views

CVE-2025-14079

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.3.5. This is due to missing capability checks on the ehcrmticketgeneral function combined with a shared nonce that is exposed to low-privileg...

5.3CVSS5.4AI score0.00268EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB•added 2026/02/05 9:13 a.m.•7 views

CVE-2025-14079

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.3.5. This is due to missing capability checks on the ehcrmticketgeneral function combined with a shared nonce that is exposed to low-privileg...

5.3CVSS5.4AI score0.00268EPSS
SaveExploits0References4
CVE
CVE•added 2026/02/05 9:13 a.m.•32 views

CVE-2025-14079

CVE-2025-14079 affects the ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress, up to version 3.3.5. The root cause is missing capability checks on eh_crm_ticket_general combined with a shared nonce exposed to low-privilege users, allowing authenticated attackers with Subscri...

5.3CVSS5.3AI score0.00268EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment•added 2026/02/05 9:13 a.m.•6 views

CVE-2025-14079 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.5 - Missing Authorization to Authenticated (Subscriber+) Settings Update

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.3.5. This is due to missing capability checks on the ehcrmticketgeneral function combined with a shared nonce that is exposed to low-privileg...

5.3CVSS5.4AI score0.00268EPSS
SaveExploits0References3
EUVD
EUVD•added 2026/02/05 9:13 a.m.•10 views

EUVD-2025-206869

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.3.5. This is due to missing capability checks on the ehcrmticketgeneral function combined with a shared nonce that is exposed to low-privileg...

5.3CVSS5.4AI score0.00268EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2026/02/05 9:13 a.m.•34 views

CVE-2025-14079 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.5 - Missing Authorization to Authenticated (Subscriber+) Settings Update

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.3.5. This is due to missing capability checks on the ehcrmticketgeneral function combined with a shared nonce that is exposed to low-privileg...

5.3CVSS0.00268EPSS
SaveExploits0References3
Rows per page
Query Builder