Threats tagged 'ghsa-6482-35w9-537p'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.8	CVE-2025-11456The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to arbitrary file uploads Critical9.82025-11-21GCVE DatabaseCVE-2025-11456 The ELEX WordPress HelpDesk & Customer Ticketing System plugin up to version 3.3.1 contains a vulnerability that allows unauthenticated attackers to upload arbitrary files due to missing file type validation. This flaw exists in the eh_crm_new_ticket_post() function and could lead to remote code execution on the affected server. Report on CVE-2025-11456 Vulnerability CWE-434 #ghsa-6482-35w9-537p	GCVE Database	2025-11-21

Page 1 of 1