https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-13534.htmlhttps://patchthecve.com/cve/CVE-2025-13534.htmlSun, 18 Oct 2026 18:10:00 +0000MEDIUM 6.3: The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.3.2. This is due to missing authorization checks on the eh_crm_edit_agent AJAX action. This makes it possible for authenticated attackers, with Chttps://patchthecve.com/cve/CVE-2025-47658.htmlhttps://patchthecve.com/cve/CVE-2025-47658.htmlWed, 17 Jun 2026 09:28:28 +0000CRITICAL 9.9: Unrestricted Upload of File with Dangerous Type vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Upload a Web Shell to a Web Server.This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from n/a thhttps://patchthecve.com/cve/CVE-2024-12171.htmlhttps://patchthecve.com/cve/CVE-2024-12171.htmlWed, 17 Jun 2026 06:59:10 +0000HIGH 8.8: The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the 'eh_crm_agent_add_user' AJAX action in all versions up to, and including, 3.2.6. This makes it possible for authenticated attackers, with Subscr