PLUGIN SECURITY
Is ELEX WordPress HelpDesk & Customer Ticketing System safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the ELEX WordPress HelpDesk & Customer Ticketing System WordPress plugin — checked against WP Clinic's local security database.
What this plugin does
- Slug:
elex-helpdesk-customer-support-ticket-system
Maintenance status
Known vulnerabilities
18 known CVEs on file for ELEX WordPress HelpDesk & Customer Ticketing System.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-125855 | Deserialization of Untrusted Data | Deserialization of Untrusted Data | Critical 9.8 | < 3.4.0 | 3.4.0 | 2026-11-13 | — |
| CVE-2026-119077 | ELEX WordPress HelpDesk & Customer Ticketing System [elex-helpdesk-customer-support-ticket-system] < 3.4.0 | Deserialization of Untrusted Data | Critical 9.8 | < 3.4.0 | 3.4.0 | 2026-11-05 | — |
| CVE-2026-114630 | ELEX WordPress HelpDesk & Customer Ticketing System [elex-helpdesk-customer-support-ticket-system] < 3.3.9 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | Critical 9.1 | < 3.3.9 | 3.3.9 | 2026-10-15 | — |
| CVE-2026-103768 | ELEX WordPress HelpDesk & Customer Ticketing System [elex-helpdesk-customer-support-ticket-system] < 3.3.8 | Unrestricted Upload of File with Dangerous Type | Critical 9.8 | < 3.3.8 | 3.3.8 | 2026-06-02 | — |
| CVE-2025-14079 | ELEX WordPress HelpDesk & Customer Ticketing System [elex-helpdesk-customer-support-ticket-system] < 3.3.6 | Missing Authorization | Medium 5.3 | < 3.3.6 | 3.3.6 | 2026-02-04 | — |
| CVE-2026-48964 | ELEX WordPress HelpDesk & Customer Ticketing System [elex-helpdesk-customer-support-ticket-system] < 3.3.7 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | High 8.5 | < 3.3.7 | 3.3.7 | 2026-02-04 | — |
| CVE-2025-68837 | ELEX WordPress HelpDesk & Customer Ticketing System [elex-helpdesk-customer-support-ticket-system] < 3.3.6 | Missing Authorization | Medium 6.5 | < 3.3.6 | 3.3.6 | 2026-01-27 | — |
| CVE-2025-13534 | ELEX WordPress HelpDesk & Customer Ticketing System [elex-helpdesk-customer-support-ticket-system] < 3.3.3 | Improper Privilege Management | High 8.8 | < 3.3.3 | 3.3.3 | 2025-12-01 | — |
+ 11 more known vulnerabilities
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-12023 | ELEX WordPress HelpDesk & Customer Ticketing System [elex-helpdesk-customer-support-ticket-system] < 3.3.2 | Missing Authorization | Medium 4.3 | < 3.3.2 | 3.3.2 | 2025-11-20 | — |
| CVE-2025-12022 | ELEX WordPress HelpDesk & Customer Ticketing System [elex-helpdesk-customer-support-ticket-system] < 3.3.2 | Missing Authorization | Medium 4.3 | < 3.3.2 | 3.3.2 | 2025-11-20 | — |
| CVE-2025-12085 | ELEX WordPress HelpDesk & Customer Ticketing System [elex-helpdesk-customer-support-ticket-system] < 3.3.2 | Missing Authorization | Medium 4.3 | < 3.3.2 | 3.3.2 | 2025-11-20 | — |
| CVE-2025-11456 | ELEX WordPress HelpDesk & Customer Ticketing System [elex-helpdesk-customer-support-ticket-system] < 3.3.2 | Unrestricted Upload of File with Dangerous Type | Critical 9.8 | < 3.3.2 | 3.3.2 | 2025-11-20 | — |
| CVE-2025-10039 | ELEX WordPress HelpDesk & Customer Ticketing System [elex-helpdesk-customer-support-ticket-system] < 3.3.0 | Authorization Bypass Through User-Controlled Key | Medium 4.3 | < 3.3.0 | 3.3.0 | 2025-11-20 | — |
| CVE-2025-10054 | ELEX WordPress HelpDesk & Customer Ticketing System [elex-helpdesk-customer-support-ticket-system] < 3.3.2 | Missing Authorization | Medium 4.3 | < 3.3.2 | 3.3.2 | 2025-11-20 | — |
| CVE-2025-12169 | ELEX WordPress HelpDesk & Customer Ticketing System [elex-helpdesk-customer-support-ticket-system] < 3.3.1 | Missing Authorization | Medium 4.3 | < 3.3.1 | 3.3.1 | 2025-11-20 | — |
| CVE-2025-47658 | ELEX WordPress HelpDesk & Customer Ticketing System [elex-helpdesk-customer-support-ticket-system] < 3.3.0 | Unrestricted Upload of File with Dangerous Type | Critical 9.9 | < 3.3.0 | 3.3.0 | 2025-05-08 | — |
| CVE-2024-12171 | ELEX WordPress HelpDesk & Customer Ticketing System [elex-helpdesk-customer-support-ticket-system] < 3.2.7 | Missing Authorization | High 8.8 | < 3.2.7 | 3.2.7 | 2025-01-31 | — |
| — | ELEX WordPress HelpDesk & Customer Ticketing System [elex-helpdesk-customer-support-ticket-system] < 3.3.5 | — | High 7.2 | < 3.3.5 | 3.3.5 | 0000-00-00 | — |
| CVE-2025-9343 | ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.5 - Unauthenticated Stored Cross-Site Scripting | — | Unknown | < 3.3.5 | 3.3.5 | — | — |
How to fix it
Update this plugin to the latest release from wordpress.org — each CVE above lists the exact release that fixed it ("Fixed in") when one is on file.
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.