https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 04:43:54 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-283121 EUVD-2026-283121 https://cve.radiocsirt.org/vuln/euvd-2026-283121 https://cve.radiocsirt.org/vuln/fkie_cve-2025-13534 <p>The ELEX WordPress HelpDesk &amp; Customer Ticketing System plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.3.2. This is due to missing authorization checks on the eh_crm_edit_agent AJAX action. This makes it possible for authenticated attackers, with Contributor-level access and above, to escalate their WSDesk privileges from limited &#34;Reply Tickets&#34; permissions to full helpdesk administrator capabilities, gaining unauthorized access to ticket management, settings configuration, agent administration, and sensitive customer data.</p> <p>The ELEX WordPress HelpDesk &amp; Customer Ticketing System plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.3.2. This is due to missing authorization checks on the eh_crm_edit_agent AJAX action. This makes it possible for authenticated attackers, with Contributor-level access and above, to escalate their WSDesk privileges from limited &#34;Reply Tickets&#34; permissions to full helpdesk administrator capabilities, gaining unauthorized access to ticket management, settings configuration, agent administration, and sensitive customer data.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-13534 https://cve.radiocsirt.org/vuln/ghsa-2mh8-mqmp-3xq6 <p>The ELEX WordPress HelpDesk &amp; Customer Ticketing System plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.3.2. This is due to missing authorization checks on the eh_crm_edit_agent AJAX action. This makes it possible for authenticated attackers, with Contributor-level access and above, to escalate their WSDesk privileges from limited &#34;Reply Tickets&#34; permissions to full helpdesk administrator capabilities, gaining unauthorized access to ticket management, settings configuration, agent administration, and sensitive customer data.</p> <p>The ELEX WordPress HelpDesk &amp; Customer Ticketing System plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.3.2. This is due to missing authorization checks on the eh_crm_edit_agent AJAX action. This makes it possible for authenticated attackers, with Contributor-level access and above, to escalate their WSDesk privileges from limited &#34;Reply Tickets&#34; permissions to full helpdesk administrator capabilities, gaining unauthorized access to ticket management, settings configuration, agent administration, and sensitive customer data.</p> https://cve.radiocsirt.org/vuln/ghsa-2mh8-mqmp-3xq6