Skip to content

CVE record · 1 source

CVE-2026-114630

CVSS 9.1

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path…

Vendor: Elextensions
Product: ELEX WordPress HelpDesk & Customer Ticketing System
CVSS v3.1: 9.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Weakness: CWE-22
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

38

CVE NVD 2h ago

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path…

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the factory_reset function in all versions up to, and including…

CVSS 9.1 CVE-2026-114630 Elextensions