Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1169 matches found

CNVD
CNVD•added 2025/11/25 12:0 a.m.•8 views

WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin unauthorized data modification vulnerability (CNVD-2025-30132)

WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin is a helpdesk and customer work order system plugin for WordPress websites designed to help businesses or individuals efficiently manage customer support requests. WordPress ELEX WordPress HelpDesk & Customer Ticketing System...

4.3CVSS6.8AI score0.00184EPSS
SaveExploits0References1
CNVD
CNVD•added 2025/11/25 12:0 a.m.•7 views

WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin unauthorized data modification vulnerability

WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin is a helpdesk and customer work order system plugin for WordPress websites designed to help businesses or individuals efficiently manage customer support requests. WordPress ELEX WordPress HelpDesk & Customer Ticketing System...

4.3CVSS6.8AI score0.00184EPSS
SaveExploits0References1
CNVD
CNVD•added 2025/11/25 12:0 a.m.•9 views

WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin unauthorized data modification vulnerability (CNVD-2025-30131)

WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin is a helpdesk and customer work order system plugin for WordPress websites designed to help businesses or individuals efficiently manage customer support requests. WordPress ELEX WordPress HelpDesk & Customer Ticketing System...

5.3CVSS6.9AI score0.00279EPSS
SaveExploits0References1
CNVD
CNVD•added 2025/11/25 12:0 a.m.•7 views

WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin unauthorized data modification vulnerability (CNVD-2025-30133)

WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin is a helpdesk and customer work order system plugin for WordPress websites designed to help businesses or individuals efficiently manage customer support requests. WordPress ELEX WordPress HelpDesk & Customer Ticketing System...

4.3CVSS6.8AI score0.00184EPSS
SaveExploits0References1
CNVD
CNVD•added 2025/11/25 12:0 a.m.•8 views

WordPress ELEX WordPress HelpDesk&Customer Ticketing System plugin missing privilege check vulnerability

WordPress ELEX WordPress HelpDesk& Customer Ticketing System plugin is a helpdesk and customer work order system plugin designed for WordPress websites, designed to help businesses or individuals efficiently manage customer support requests. WordPress ELEX WordPress HelpDesk& Customer Ticketing...

4.3CVSS6.8AI score0.00184EPSS
SaveExploits0References1
Patchstack
Patchstack•added 2025/11/24 7:1 a.m.•10 views

WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.1 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by ifoundbug in WordPress Plugin ELEX WordPress HelpDesk & Customer Ticketing System versions = 3.3.1...

9.8CVSS7AI score0.00717EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE•added 2025/11/22 12:34 p.m.•9 views

CVE-2025-10054

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ehcrmremoveagent' function in all versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, wit...

5.3CVSS5AI score0.00279EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2025/11/22 12:33 p.m.•11 views

CVE-2025-10039

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.9 via the 'ehcrmticketsingleviewclient' due to missing validation on a user controlled key. This makes it possible for...

4.3CVSS5.5AI score0.00282EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2025/11/22 8:35 a.m.•17 views

CVE-2025-11456

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ehcrmnewticketpost function in all versions up to, and including, 3.3.1. This makes it possible for unauthenticated attackers to upload...

9.8CVSS7.5AI score0.00717EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2025/11/22 5:36 a.m.•13 views

CVE-2025-12169

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpajaxehcrmsettingsemptyscheduledactions' AJAX Action in all versions up to, and including, 3.3.0. This makes it possible for...

4.3CVSS5.1AI score0.00184EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2025/11/22 5:36 a.m.•8 views

CVE-2025-12085

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ehcrmsettingsemptytrash' function in all versions up to, and including, 3.3.1. This makes it possible for authenticated...

4.3CVSS5.1AI score0.00184EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2025/11/22 5:36 a.m.•15 views

CVE-2025-12023

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ehcrmrestoredata function in all versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, with...

4.3CVSS5.1AI score0.00184EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2025/11/22 5:35 a.m.•8 views

CVE-2025-12022

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ehcrmsettingsrestoretrash' AJAX endpoint in all versions up to, and including, 3.3.1. This makes it possible for authenticated...

4.3CVSS5.1AI score0.00184EPSS
SaveExploits0References1
EUVD
EUVD•added 2025/11/21 3:31 p.m.•6 views

EUVD-2025-198487

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.9 via the 'ehcrmticketsingleviewclient' due to missing validation on a user controlled key. This makes it possible for...

4.3CVSS5.1AI score0.00282EPSS
SaveExploits0References4
OSV
OSV•added 2025/11/21 1:15 p.m.•4 views

CVE-2025-10039

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.9 via the 'ehcrmticketsingleviewclient' due to missing validation on a user controlled key. This makes it possible for...

4.3CVSS5.8AI score0.00282EPSS
SaveExploits0References3
NVD
NVD•added 2025/11/21 1:15 p.m.•7 views

CVE-2025-10039

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.9 via the 'ehcrmticketsingleviewclient' due to missing validation on a user controlled key. This makes it possible for...

4.3CVSS0.00282EPSS
SaveExploits0References3
OSV
OSV•added 2025/11/21 1:15 p.m.•4 views

CVE-2025-10054

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ehcrmremoveagent' function in all versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, wit...

4.3CVSS5.8AI score0.00279EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment•added 2025/11/21 12:28 p.m.•7 views

CVE-2025-10039 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.9 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_client'

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.9 via the 'ehcrmticketsingleviewclient' due to missing validation on a user controlled key. This makes it possible for...

4.3CVSS5.2AI score0.00282EPSS
SaveExploits0References3
CVE
CVE•added 2025/11/21 12:28 p.m.•17 views

CVE-2025-10039

CVE-2025-10039 affects the ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress (

4.3CVSS5.2AI score0.00282EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist•added 2025/11/21 12:28 p.m.•21 views

CVE-2025-10039 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.9 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_client'

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.9 via the 'ehcrmticketsingleviewclient' due to missing validation on a user controlled key. This makes it possible for...

4.3CVSS0.00282EPSS
SaveExploits0References3
Rows per page
Query Builder