CVEs we hold for Elextensions
Records whose assigning authority named Elextensions as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-48964WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.6 - SQL Injection vulnerabilityELEXtensions ELEX WordPress HelpDesk & Customer Ticketing…
CVE-2025-9343ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.4 - Unauthenticated Stored Cross-Site Scriptingelextensions ELEX WordPress HelpDesk & Customer Ticketing…
CVE-2025-68837WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.5 - Broken Access Control vulnerabilityELEXtensions ELEX WordPress HelpDesk & Customer Ticketing…
CVE-2025-53213WordPress ReachShip WooCommerce Multi-Carrier & Conditional Shipping <= 4.3.1 - Arbitrary File Upload VulnerabilityELEXtensions ReachShip WooCommerce Multi-Carrier &…
CVE-2025-47658WordPress ELEX HelpDesk & Customer Ticketing System plugin <= 3.2.9 - Arbitrary File Upload vulnerabilityELEXtensions ELEX WordPress HelpDesk & Customer Ticketing…
CVE-2025-47645WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.4.9 - Subscriber+ SQL Injection…ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products…
CVE-2025-47643WordPress ELEX Product Feed for WooCommerce <= 3.1.2 - SQL Injection VulnerabilityELEXtensions ELEX Product Feed for WooCommerce
CVE-2025-3280ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.4.9 - Authenticated (Subscriber+) SQL Injectionelextensions ELEX WooCommerce Bulk Edit Products, Prices &…
CVE-2025-31406WordPress ELEX WooCommerce Request a Quote plugin <= 2.3.9 - Broken Access Control vulnerabilityELEXtensions ELEX WooCommerce Request a Quote
CVE-2025-22352WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes Plugin <= 1.4.9 - SQL Injection…ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products…
CVE-2025-14079ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.5 - Missing Authorization to Authenticated (Subscriber+)…elextensions ELEX WordPress HelpDesk & Customer Ticketing…
CVE-2025-13534ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.2 - Authenticated (Contributor+) Privilege Escalation via…elextensions ELEX WordPress HelpDesk & Customer Ticketing…
CVE-2025-12751WSChat – WordPress Live Chat <= 3.1.6 - Missing Authorization to Authenticated (Subscriber+) Settings Resetelextensions WSChat – WordPress Live Chat
CVE-2025-12169ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.0 - Missing Authorization to Authenitcated (Subscriber+) to…elextensions ELEX WordPress HelpDesk & Customer Ticketing…
CVE-2025-12085ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+)…elextensions ELEX WordPress HelpDesk & Customer Ticketing…
CVE-2025-12023ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+)…elextensions ELEX WordPress HelpDesk & Customer Ticketing…
CVE-2025-12022ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+)…elextensions ELEX WordPress HelpDesk & Customer Ticketing…
CVE-2025-11456ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Unauthenticated Arbitrary File Uploadelextensions ELEX WordPress HelpDesk & Customer Ticketing…
CVE-2025-10054ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+)…elextensions ELEX WordPress HelpDesk & Customer Ticketing…
CVE-2025-10046ELEX WooCommerce Google Shopping (Google Product Feed) <= 1.4.3 - Authenticated (Admin+) SQL Inejctionelextensions ELEX WooCommerce Google Shopping (Google…
CVE-2025-10039ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.9 - Authenticated (Subscriber+) Insecure Direct Object…elextensions ELEX WordPress HelpDesk & Customer Ticketing…
CVE-2024-32105WordPress ELEX WooCommerce Dynamic Pricing and Discounts plugin <= 2.1.2 - Cross Site Request Forgery (CSRF)…ELEXtensions ELEX WooCommerce Dynamic Pricing and Discounts
CVE-2024-31364WordPress ELEX WooCommerce Dynamic Pricing and Discounts plugin <= 2.1.2 - Cross Site Request Forgery (CSRF)…ELEXtensions ELEX WooCommerce Dynamic Pricing and Discounts
CVE-2024-31255WordPress ELEX WooCommerce Dynamic Pricing and Discounts plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerabilityELEXtensions ELEX WooCommerce Dynamic Pricing and Discounts
CVE-2024-12266ELEX WooCommerce Dynamic Pricing and Discounts <= 2.1.7 - Missing Authorizationelextensions ELEX WooCommerce Dynamic Pricing and Discounts
CVE-2024-12171ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.6 - Missing Authorization to Authenticated (Subscriber+)…elextensions ELEX WordPress HelpDesk & Customer Ticketing…
26 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.