Log in Start free

ELEXtensions

Products

ProductCVEsExploitedLatest
ELEX WordPress HelpDesk & Customer Ticketing System15–Oct 16, 2026
ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes4–Oct 15, 2026
ELEX WooCommerce Dynamic Pricing and Discounts4–Dec 24, 2024
ELEX WooCommerce Request a Quote1–Mar 31, 2025
ReachShip WooCommerce Multi-Carrier & Conditional Shipping1–Aug 20, 2025
ELEX Product Feed for WooCommerce1–May 7, 2025
WSChat – WordPress Live Chat1–Nov 19, 2025
ELEX WooCommerce Bulk Edit Products, Prices & Attributes (Basic)1–Apr 24, 2025
ELEX WooCommerce Google Shopping (Google Product Feed)1–Sep 6, 2025

Exploited and recent CVEs

  • CVE-2026-103768 Critical 9.8 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.7 - Unauthenticated Arbitrary File Upload via IMAP Email Attachment 0.6%
  • CVE-2026-103083 Medium 5.4 WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - Insecure Direct Object References (IDOR) vulnerability 0.2%
  • CVE-2026-40800 Critical 9.3 WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - SQL Injection vulnerability 0.4%
  • CVE-2026-48964 High 8.5 WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.6 - SQL Injection vulnerability 0.3%
  • CVE-2025-68837 Medium 6.5 WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.5 - Broken Access Control vulnerability 0.3%
  • CVE-2025-14079 Medium 5.3 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.5 - Missing Authorization to Authenticated (Subscriber+) Settings Update 0.3%
  • CVE-2025-9343 High 7.2 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.4 - Unauthenticated Stored Cross-Site Scripting 0.2%
  • CVE-2025-13534 Medium 6.3 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.2 - Authenticated (Contributor+) Privilege Escalation via eh_crm_edit_agent AJAX Action 0.3%
  • CVE-2025-10039 Medium 4.3 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.9 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_client' 0.3%
  • CVE-2025-10054 Medium 4.3 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Role Removal 0.3%
  • CVE-2025-11456 Critical 9.8 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Unauthenticated Arbitrary File Upload 0.8%
  • CVE-2025-12169 Medium 4.3 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.0 - Missing Authorization to Authenitcated (Subscriber+) to Scheduled Trigger Deletion 0.2%
  • CVE-2025-12022 Medium 4.3 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Restore 0.2%
  • CVE-2025-12085 Medium 4.3 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Empty 0.2%
  • CVE-2025-12023 Medium 4.3 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Ticket Restore 0.2%
  • CVE-2025-12751 Medium 4.3 WSChat – WordPress Live Chat <= 3.1.6 - Missing Authorization to Authenticated (Subscriber+) Settings Reset 0.2%
  • CVE-2025-10046 Medium 4.9 ELEX WooCommerce Google Shopping (Google Product Feed) <= 1.4.3 - Authenticated (Admin+) SQL Inejction 0.8%
  • CVE-2025-53213 Critical 9.9 WordPress ReachShip WooCommerce Multi-Carrier & Conditional Shipping <= 4.3.1 - Arbitrary File Upload Vulnerability 0.3%
  • CVE-2025-47645 High 8.5 WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.4.9 - Subscriber+ SQL Injection vulnerability 0.4%
  • CVE-2025-47658 Critical 9.9 WordPress ELEX HelpDesk & Customer Ticketing System plugin <= 3.2.9 - Arbitrary File Upload vulnerability 0.4%
  • CVE-2025-47643 High 7.6 WordPress ELEX Product Feed for WooCommerce <= 3.1.2 - SQL Injection Vulnerability 0.4%
  • CVE-2025-3280 Medium 6.5 ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.4.9 - Authenticated (Subscriber+) SQL Injection 0.4%
  • CVE-2025-31406 Medium 4.3 WordPress ELEX WooCommerce Request a Quote plugin <= 2.3.9 - Broken Access Control vulnerability 0.3%
  • CVE-2024-12171 High 8.8 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation 0.5%
  • CVE-2025-22352 High 7.6 WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes Plugin <= 1.4.9 - SQL Injection vulnerability 0.8%
  • CVE-2024-12266 Medium 6.5 ELEX WooCommerce Dynamic Pricing and Discounts <= 2.1.7 - Missing Authorization 0.4%
  • CVE-2024-31364 Medium 4.3 WordPress ELEX WooCommerce Dynamic Pricing and Discounts plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-32105 Medium 4.3 WordPress ELEX WooCommerce Dynamic Pricing and Discounts plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-31255 High 7.1 WordPress ELEX WooCommerce Dynamic Pricing and Discounts plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability 0.3%