The ELEX WordPress HelpDesk & Customer Ticketing System plugin suffers from an authorization bypass vulnerability (CWE-639) in versions up to 3.2.9. This vulnerability arises from insufficient validation of the 'eh_crm_ticket_single_view_client' parameter, which is user-controlled. As a result, authenticated users with Subscriber-level privileges or higher can access the contents of all support tickets, bypassing intended access controls. The vulnerability has a CVSS 3.1 base score of 4.3, reflecting a medium impact primarily on confidentiality. No patch or vendor advisory confirming remediation is currently available.

Authenticated users with Subscriber-level access or above can read the contents of all support tickets, potentially exposing sensitive customer information. There is no indication of impact on integrity or availability. The vulnerability does not require elevated privileges beyond Subscriber-level and does not require user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit Subscriber-level access to trusted users only and monitor for suspicious activity related to ticket access. Avoid granting unnecessary Subscriber-level permissions. No official patch or workaround has been published at this time.