Threats tagged 'ghsa-68qq-4wv4-qx36'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.3	CVE-2025-10039The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Insecure Direct Object Medium4.32025-11-21GCVE DatabaseCVE-2025-10039 The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress versions up to and including 3.2.9 contains an Insecure Direct Object Reference (IDOR) vulnerability. This flaw allows authenticated users with Subscriber-level access or higher to read the contents of all support tickets due to missing validation on a user-controlled key. Report on CVE-2025-10039 Vulnerability CWE-639 #ghsa-68qq-4wv4-qx36	GCVE Database	2025-11-21

Page 1 of 1