CVE-2025-68837

Severity CVSS v4.0:

Pending analysis

Type:

Unavailable / Other

Publication date:

20/02/2026

Last modified:

20/02/2026

Description

Missing Authorization vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from n/a through

Impact

References to Advisories, Solutions, and Tools

https://patchstack.com/database/Wordpress/Plugin/elex-helpdesk-customer-support-ticket-system/vulnerability/wordpress-elex-wordpress-helpdesk-customer-ticketing-system-plugin-3-3-5-broken-access-control-vulnerability?_s_id=cve