Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1190 matches found

CVE
CVE•added 2026/03/25 4:14 p.m.•23 views

CVE-2026-23977

CVE-2026-23977 concerns the WordPress plugin WPFactory Helpdesk Support Ticket System for WooCommerce (up to and including version 2.1.2). The issue is a Broken Access Control vulnerability caused by incorrectly configured access control security levels, allowing unauthorized access. Public data ...

7.5CVSS5.8AI score0.00366EPSS
SaveExploits0References1
CNNVD
CNNVD•added 2026/03/25 12:00 a.m.•17 views

WordPress plugin Helpdesk Support Ticket System for WooCommerce 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added to a...

7.5CVSS5.8AI score0.00366EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2026/03/25 12:00 a.m.•16 views

PT-2026-27846

Name of the Vulnerable Software and Affected Versions WPFactory Helpdesk Support Ticket System for WooCommerce versions through 2.1.2 Description An authorization issue exists in WPFactory Helpdesk Support Ticket System for WooCommerce. The issue involves incorrectly configured access control...

7.5CVSS5.9AI score0.00366EPSS
SaveExploits0References4
Patchstack
Patchstack•added 2026/03/23 6:38 p.m.•24 views

WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by daroo in WordPress Plugin Helpdesk Support Ticket System for WooCommerce versions = 2.1.2...

7.5CVSS5.8AI score0.00366EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE•added 2026/02/21 7:30 p.m.•13 views

CVE-2025-68837

Missing Authorization vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from...

6.5CVSS5.5AI score0.00248EPSS
SaveExploits0References1
NVD
NVD•added 2026/02/20 4:22 p.m.•14 views

CVE-2025-68837

Missing Authorization vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from...

6.5CVSS0.00248EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/02/20 3:46 p.m.•32 views

CVE-2025-68837 WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from...

6.5CVSS0.00248EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/02/20 3:46 p.m.•5 views

CVE-2025-68837 WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from...

6.5CVSS5.3AI score0.00248EPSS
SaveExploits0References1
CVE
CVE•added 2026/02/20 3:46 p.m.•20 views

CVE-2025-68837

CVE-2025-68837 affects ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System (plugin) up to and including version 3.3.5, with a Missing Authorization / Broken Access Control vulnerability. The issue allows exploitation of incorrectly configured access control security levels (as descri...

6.5CVSS5.5AI score0.00248EPSS
SaveExploits0References1
CVE
CVE•added 2026/02/20 3:46 p.m.•18 views

CVE-2025-67977

CVE-2025-67977 describes a Missing Authorization vulnerability in the WordPress plugin “HAPPY – Helpdesk Support Ticket System” (versions up to and including 1.0.8). According to Red Hat/NVD/CVE records, the flaw is a Broken Access Control via incorrectly configured access levels, enabling unauth...

8.2CVSS5.5AI score0.00269EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/02/20 3:46 p.m.•5 views

CVE-2025-67977 WordPress HAPPY plugin <= 1.0.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in VillaTheme HAPPY happy-helpdesk-support-ticket-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HAPPY: from n/a through = 1.0.8...

8.2CVSS5.3AI score0.00269EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2026/02/20 12:00 a.m.•26 views

PT-2026-21050

Name of the Vulnerable Software and Affected Versions VillaTheme HAPPY versions through 1.0.8 Description The software contains a missing authorization flaw due to incorrectly configured access control security levels. This allows for potential exploitation. Recommendations Update VillaTheme HAPP...

5.4AI score0.00269EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2026/02/20 12:00 a.m.•15 views

PT-2026-21102

Name of the Vulnerable Software and Affected Versions ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System versions through 3.3.5 Description The ELEX WordPress HelpDesk & Customer Ticketing System has a flaw related to incorrectly configured access control security levels, potentiall...

5.4AI score0.00248EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE•added 2026/02/06 1:30 p.m.•20 views

CVE-2025-14079

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.3.5. This is due to missing capability checks on the ehcrmticketgeneral function combined with a shared nonce that is exposed to low-privileg...

5.3CVSS5.4AI score0.00268EPSS
SaveExploits0References1
NVD
NVD•added 2026/02/05 10:16 a.m.•12 views

CVE-2025-14079

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.3.5. This is due to missing capability checks on the ehcrmticketgeneral function combined with a shared nonce that is exposed to low-privileg...

5.3CVSS0.00268EPSS
SaveExploits0References3
CVE
CVE•added 2026/02/05 9:13 a.m.•32 views

CVE-2025-14079

CVE-2025-14079 affects the ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress, up to version 3.3.5. The root cause is missing capability checks on eh_crm_ticket_general combined with a shared nonce exposed to low-privilege users, allowing authenticated attackers with Subscri...

5.3CVSS5.3AI score0.00268EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB•added 2026/02/05 9:13 a.m.•8 views

CVE-2025-14079

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.3.5. This is due to missing capability checks on the ehcrmticketgeneral function combined with a shared nonce that is exposed to low-privileg...

5.3CVSS5.4AI score0.00268EPSS
SaveExploits0References4
EUVD
EUVD•added 2026/02/05 9:13 a.m.•11 views

EUVD-2025-206869

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.3.5. This is due to missing capability checks on the ehcrmticketgeneral function combined with a shared nonce that is exposed to low-privileg...

5.3CVSS5.4AI score0.00268EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2026/02/05 9:13 a.m.•36 views

CVE-2025-14079 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.5 - Missing Authorization to Authenticated (Subscriber+) Settings Update

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.3.5. This is due to missing capability checks on the ehcrmticketgeneral function combined with a shared nonce that is exposed to low-privileg...

5.3CVSS0.00268EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment•added 2026/02/05 9:13 a.m.•6 views

CVE-2025-14079 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.5 - Missing Authorization to Authenticated (Subscriber+) Settings Update

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.3.5. This is due to missing capability checks on the ehcrmticketgeneral function combined with a shared nonce that is exposed to low-privileg...

5.3CVSS5.4AI score0.00268EPSS
SaveExploits0References3
Rows per page
Query Builder