Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/11/22 5:36 a.m.6 views

CVE-2025-12085

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ehcrmsettingsemptytrash' function in all versions up to, and including, 3.3.1. This makes it possible for authenticated...

4.3CVSS5.1AI score0.00164EPSS
Exploits0References1
OSV
OSV
added 2025/11/21 6:15 a.m.3 views

CVE-2025-12085

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ehcrmsettingsemptytrash' function in all versions up to, and including, 3.3.1. This makes it possible for authenticated...

4.3CVSS5.8AI score0.00164EPSS
Exploits0References2
NVD
NVD
added 2025/11/21 6:15 a.m.3 views

CVE-2025-12085

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ehcrmsettingsemptytrash' function in all versions up to, and including, 3.3.1. This makes it possible for authenticated...

4.3CVSS0.00164EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/11/21 5:32 a.m.3 views

CVE-2025-12085 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Empty

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ehcrmsettingsemptytrash' function in all versions up to, and including, 3.3.1. This makes it possible for authenticated...

4.3CVSS4.7AI score0.00164EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/11/21 5:32 a.m.7 views

CVE-2025-12085 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Empty

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ehcrmsettingsemptytrash' function in all versions up to, and including, 3.3.1. This makes it possible for authenticated...

4.3CVSS0.00164EPSS
Exploits0References2
EUVD
EUVD
added 2025/11/21 5:32 a.m.6 views

EUVD-2025-198380

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ehcrmsettingsemptytrash' function in all versions up to, and including, 3.3.1. This makes it possible for authenticated...

4.3CVSS4.6AI score0.00164EPSS
Exploits0References3
Rows per page
Query Builder