PT-2025-47674 · WordPress · Elex Wordpress Helpdesk & Customer Ticketing System

Ifoundbug · Published 2025-11-21 · Updated 2025-11-26 · CVE-2025-11456

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ELEX WordPress HelpDesk & Customer Ticketing System versions up to and including 3.3.1

Description The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is susceptible to arbitrary file uploads. This is due to a lack of file type validation within the eh crm new ticket post() function. This allows unauthenticated attackers to upload arbitrary files to the affected server, potentially leading to remote code execution. The eh crm new ticket post() function is the component responsible for handling new ticket submissions and is vulnerable due to insufficient input sanitization.

Recommendations Versions prior to and including 3.3.1 should be updated to a newer, fixed version as soon as it becomes available. As a temporary workaround, consider disabling file uploads within the ELEX WordPress HelpDesk & Customer Ticketing System plugin until a patch is available.

Fix

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2025-11456

Affected Products

Elex Wordpress Helpdesk & Customer Ticketing System

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2025-11456 · Security Note
• https://osv.dev/vulnerability/CVE-2025-11456 · Vendor Advisory
• https://plugins.trac.wordpress.org/changeset/3399391/elex-helpdesk-customer-support-ticket-system/trunk/includes/class-crm-ajax-functions-three.php · Patch
• https://wordpress.org/plugins/elex-helpdesk-customer-support-ticket-system · Note
• https://twitter.com/cracbot/status/1993635889852121559 · Twitter Post
• https://twitter.com/offseq/status/1991794136714817561 · Twitter Post
• https://twitter.com/CveFindCom/status/1991834221124386888 · Twitter Post
• https://plugins.trac.wordpress.org/browser/elex-helpdesk-customer-support-ticket-system/trunk/includes/class-crm-ajax-functions-three.php?rev=3332203 · Note
• https://twitter.com/MNovofastovsky/status/1992579888214130860 · Twitter Post
• https://twitter.com/CVEnew/status/1991776206853935347 · Twitter Post
• https://twitter.com/ZeroPathLabs/status/1991787924430508151 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/a6f362c1-fe64-4be1-9713-14c0561a59ce?source=cve · Note