agentprime: elextensions-elex-wordpress-helpdesk-customer-ticketing-systemEvery new CVE for elextensions-elex-wordpress-helpdesk-customer-ticketing-system.https://agentprime.io/CVE-2026-103768: ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.7 - Unauthenticated Arbitrary File Upload via IMAP Email Attachmenthttps://agentprime.io/advisories/CVE-2026-103768/https://agentprime.io/advisories/CVE-2026-103768/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 05:30:25 GMTCVEcriticalCVE-2026-48964: WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.6 - SQL Injection vulnerabilityhttps://agentprime.io/advisories/CVE-2026-48964/https://agentprime.io/advisories/CVE-2026-48964/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jun 2026 20:19:06 GMTCVECVE-2025-68837: WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.5 - Broken Access Control vulnerabilityhttps://agentprime.io/advisories/CVE-2025-68837/https://agentprime.io/advisories/CVE-2025-68837/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Feb 2026 15:46:41 GMTCVECVE-2025-14079: ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.5 - Missing Authorization to Authenticated (Subscriber+) Settings Updatehttps://agentprime.io/advisories/CVE-2025-14079/https://agentprime.io/advisories/CVE-2025-14079/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Feb 2026 09:13:44 GMTCVECVE-2025-9343: ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.4 - Unauthenticated Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2025-9343/https://agentprime.io/advisories/CVE-2025-9343/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 21 Dec 2025 03:20:04 GMTCVECVE-2025-13534: ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.2 - Authenticated (Contributor+) Privilege Escalation via eh_crm_edit_agent AJAX Actionhttps://agentprime.io/advisories/CVE-2025-13534/https://agentprime.io/advisories/CVE-2025-13534/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Dec 2025 08:24:53 GMTCVECVE-2025-10039: ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.9 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_client'https://agentprime.io/advisories/CVE-2025-10039/https://agentprime.io/advisories/CVE-2025-10039/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Nov 2025 12:28:10 GMTCVECVE-2025-10054: ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Role Removalhttps://agentprime.io/advisories/CVE-2025-10054/https://agentprime.io/advisories/CVE-2025-10054/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Nov 2025 12:28:07 GMTCVECVE-2025-11456: ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Unauthenticated Arbitrary File Uploadhttps://agentprime.io/advisories/CVE-2025-11456/https://agentprime.io/advisories/CVE-2025-11456/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Nov 2025 07:31:53 GMTCVEcriticalCVE-2025-12169: ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.0 - Missing Authorization to Authenitcated (Subscriber+) to Scheduled Trigger Deletionhttps://agentprime.io/advisories/CVE-2025-12169/https://agentprime.io/advisories/CVE-2025-12169/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Nov 2025 05:32:07 GMTCVECVE-2025-12022: ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Restorehttps://agentprime.io/advisories/CVE-2025-12022/https://agentprime.io/advisories/CVE-2025-12022/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Nov 2025 05:32:06 GMTCVECVE-2025-12085: ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Emptyhttps://agentprime.io/advisories/CVE-2025-12085/https://agentprime.io/advisories/CVE-2025-12085/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Nov 2025 05:32:05 GMTCVECVE-2025-12023: ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Ticket Restorehttps://agentprime.io/advisories/CVE-2025-12023/https://agentprime.io/advisories/CVE-2025-12023/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Nov 2025 05:32:05 GMTCVECVE-2025-47658: WordPress ELEX HelpDesk & Customer Ticketing System plugin <= 3.2.9 - Arbitrary File Upload vulnerabilityhttps://agentprime.io/advisories/CVE-2025-47658/https://agentprime.io/advisories/CVE-2025-47658/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 May 2025 12:43:23 GMTCVEcriticalCVE-2024-12171: ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalationhttps://agentprime.io/advisories/CVE-2024-12171/https://agentprime.io/advisories/CVE-2024-12171/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 01 Feb 2025 03:21:13 GMTCVE