elex_wordpress_helpdesk_customer_ticketing_system vulnerabilities

CVEs whose affected-version data names the elex_wordpress_helpdesk_customer_ticketing_system package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-103768Critical· 9.8

today

ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.7 - Unauthenticated Arbitrary File Upload via IMAP Email Attachment

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.3.7 via the initMailPart function. This is due to insufficient file type validati…

▾ Midnightelextensions · ELEX WordPress HelpDesk & Customer Ticketing Systemvia CVEORG