Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1190 matches found

NVD
NVD•added 2025/11/21 6:15 a.m.•16 views

CVE-2025-12169

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpajaxehcrmsettingsemptyscheduledactions' AJAX Action in all versions up to, and including, 3.3.0. This makes it possible for...

4.3CVSS0.00188EPSS
SaveExploits0References2
OSV
OSV•added 2025/11/21 6:15 a.m.•8 views

CVE-2025-12085

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ehcrmsettingsemptytrash' function in all versions up to, and including, 3.3.1. This makes it possible for authenticated...

4.3CVSS5.8AI score0.00188EPSS
SaveExploits0References2
NVD
NVD•added 2025/11/21 6:15 a.m.•10 views

CVE-2025-12085

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ehcrmsettingsemptytrash' function in all versions up to, and including, 3.3.1. This makes it possible for authenticated...

4.3CVSS0.00188EPSS
SaveExploits0References2
NVD
NVD•added 2025/11/21 6:15 a.m.•11 views

CVE-2025-12022

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ehcrmsettingsrestoretrash' AJAX endpoint in all versions up to, and including, 3.3.1. This makes it possible for authenticated...

4.3CVSS0.00188EPSS
SaveExploits0References2
NVD
NVD•added 2025/11/21 6:15 a.m.•13 views

CVE-2025-12023

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ehcrmrestoredata function in all versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, with...

4.3CVSS0.00188EPSS
SaveExploits0References2
OSV
OSV•added 2025/11/21 6:15 a.m.•5 views

CVE-2025-12023

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ehcrmrestoredata function in all versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, with...

4.3CVSS5.8AI score0.00188EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment•added 2025/11/21 5:32 a.m.•11 views

CVE-2025-12169 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.0 - Missing Authorization to Authenitcated (Subscriber+) to Scheduled Trigger Deletion

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpajaxehcrmsettingsemptyscheduledactions' AJAX Action in all versions up to, and including, 3.3.0. This makes it possible for...

4.3CVSS4.7AI score0.00188EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2025/11/21 5:32 a.m.•20 views

CVE-2025-12169 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.0 - Missing Authorization to Authenitcated (Subscriber+) to Scheduled Trigger Deletion

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpajaxehcrmsettingsemptyscheduledactions' AJAX Action in all versions up to, and including, 3.3.0. This makes it possible for...

4.3CVSS0.00188EPSS
SaveExploits0References2
EUVD
EUVD•added 2025/11/21 5:32 a.m.•12 views

EUVD-2025-198378

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpajaxehcrmsettingsemptyscheduledactions' AJAX Action in all versions up to, and including, 3.3.0. This makes it possible for...

4.3CVSS4.7AI score0.00188EPSS
SaveExploits0References3
CVE
CVE•added 2025/11/21 5:32 a.m.•19 views

CVE-2025-12169

The CVE-2025-12169 entry concerns ELEX WordPress HelpDesk & Customer Ticketing System (WordPress) with a missing capability check on wp_ajax_eh_crm_settings_empty_scheduled_actions, allowing authenticated subscribers (and above) to delete scheduled triggers in all versions up to 3.3.0. Connected ...

4.3CVSS4.7AI score0.00188EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist•added 2025/11/21 5:32 a.m.•17 views

CVE-2025-12022 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Restore

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ehcrmsettingsrestoretrash' AJAX endpoint in all versions up to, and including, 3.3.1. This makes it possible for authenticated...

4.3CVSS0.00188EPSS
SaveExploits0References2
EUVD
EUVD•added 2025/11/21 5:32 a.m.•11 views

EUVD-2025-198379

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ehcrmsettingsrestoretrash' AJAX endpoint in all versions up to, and including, 3.3.1. This makes it possible for authenticated...

4.3CVSS4.7AI score0.00188EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment•added 2025/11/21 5:32 a.m.•6 views

CVE-2025-12022 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Restore

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ehcrmsettingsrestoretrash' AJAX endpoint in all versions up to, and including, 3.3.1. This makes it possible for authenticated...

4.3CVSS4.7AI score0.00188EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2025/11/21 5:32 a.m.•23 views

CVE-2025-12085 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Empty

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ehcrmsettingsemptytrash' function in all versions up to, and including, 3.3.1. This makes it possible for authenticated...

4.3CVSS0.00188EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment•added 2025/11/21 5:32 a.m.•6 views

CVE-2025-12085 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Empty

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ehcrmsettingsemptytrash' function in all versions up to, and including, 3.3.1. This makes it possible for authenticated...

4.3CVSS4.7AI score0.00188EPSS
SaveExploits0References2
EUVD
EUVD•added 2025/11/21 5:32 a.m.•10 views

EUVD-2025-198380

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ehcrmsettingsemptytrash' function in all versions up to, and including, 3.3.1. This makes it possible for authenticated...

4.3CVSS4.6AI score0.00188EPSS
SaveExploits0References3
CVE
CVE•added 2025/11/21 5:32 a.m.•20 views

CVE-2025-12085

CVE-2025-12085 affects the ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress (versions up to 3.3.1). Root cause: a missing capability check in the eh_crm_settings_empty_trash function. Impact: authenticated attackers with Subscriber+ access can permanently empty the ticket ...

4.3CVSS4.7AI score0.00188EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD•added 2025/11/21 5:32 a.m.•9 views

EUVD-2025-198381

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ehcrmrestoredata function in all versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, with...

4.3CVSS4.6AI score0.00188EPSS
SaveExploits0References3
CVE
CVE•added 2025/11/21 5:32 a.m.•19 views

CVE-2025-12023

The CVE concerns the WordPress ELEX HelpDesk & Customer Ticketing System plugin. Multiple connected documents corroborate a vulnerability in all versions up to 3.3.1 where a missing capability check on eh_crm_restore_data() allows authenticated users with Subscriber-level access and above to modi...

4.3CVSS4.7AI score0.00188EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment•added 2025/11/21 5:32 a.m.•5 views

CVE-2025-12023 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Ticket Restore

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ehcrmrestoredata function in all versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, with...

4.3CVSS4.7AI score0.00188EPSS
SaveExploits0References2
Rows per page
Query Builder