[ Vendor · 3 CVEs ]
ELEXtensions
CVEs affecting ELEXtensions published in the last 30 days, plus any ELEXtensions CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-103768 | 16 Oct 2026 | CVSS 9.8 | elextensions ELEX WordPress HelpDesk & Customer Ticketing SystemThe ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and… | |
| CVE-2026-103083 | 15 Oct 2026 | CVSS 5.4 | ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & AttributesAuthorization Bypass Through User-Controlled Key vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes… | |
| CVE-2026-40800 | 10 Oct 2026 | CVSS 9.3 | ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & AttributesSubscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 versions. |