{"id":"CVE-2025-14079","aliases":["EUVD-2025-206869","GHSA-c33w-hvc2-q76p"],"status":"published","title":"ELEX WordPress HelpDesk \u0026 Customer Ticketing System \u003c= 3.3.5 - Missing Authorization to Authenticated (Subscriber+) Settings Update","description":"The ELEX WordPress HelpDesk \u0026 Customer Ticketing System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.3.5. This is due to missing capability checks on the eh_crm_ticket_general function combined with a shared nonce that is exposed to low-privileged users. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify global WSDesk settings via the `eh_crm_ticket_general` AJAX action.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00297,"percentile":0.22537,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-862"],"published":"2026-02-05T09:13:44Z","modified":"2026-06-17T08:35:17Z","products":[{"vendor":"elextensions","product":"elex wordpress helpdesk \u0026 customer ticketing system"}],"references":[{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6fd3ea16-4706-4573-b905-93dff434968d?source=cve"},{"url":"https://plugins.trac.wordpress.org/browser/elex-helpdesk-customer-support-ticket-system/tags/3.3.4/includes/class-crm-ajax-functions-one.php#L15"},{"url":"https://plugins.trac.wordpress.org/changeset/3449609/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14079"},{"url":"https://plugins.trac.wordpress.org/changeset/3449609"},{"url":"https://github.com/advisories/GHSA-c33w-hvc2-q76p"}],"sources":{"cve":[{"id":"CVE-2025-14079","title":"ELEX WordPress HelpDesk \u0026 Customer Ticketing System \u003c= 3.3.5 - Missing Authorization to Authenticated (Subscriber+) Settings Update","description":"The ELEX WordPress HelpDesk \u0026 Customer Ticketing System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.3.5. This is due to missing capability checks on the eh_crm_ticket_general function combined with a shared nonce that is exposed to low-privileged users. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify global WSDesk settings via the `eh_crm_ticket_general` AJAX action.","status":"published","published":"2026-02-05T09:13:44.547Z","modified":"2026-04-08T16:59:59.143Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:32:28.621398Z"}],"euvd":[{"id":"EUVD-2025-206869","description":"The ELEX WordPress HelpDesk \u0026 Customer Ticketing System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.3.5. This is due to missing capability checks on the eh_crm_ticket_general function combined with a shared nonce that is exposed to low-privileged users. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify global WSDesk settings via the `eh_crm_ticket_general` AJAX action.","status":"published","published":"2026-02-05T09:13:44Z","modified":"2026-04-08T16:59:59Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T19:24:54.279102Z"}],"ghsa":[{"id":"GHSA-c33w-hvc2-q76p","title":"The ELEX WordPress HelpDesk \u0026 Customer Ticketing System plugin for WordPress is vulnerable to...","description":"The ELEX WordPress HelpDesk \u0026 Customer Ticketing System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.3.5. This is due to missing capability checks on the eh_crm_ticket_general function combined with a shared nonce that is exposed to low-privileged users. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify global WSDesk settings via the `eh_crm_ticket_general` AJAX action.","status":"published","published":"2026-02-05T12:30:25Z","modified":"2026-02-05T12:31:47Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T15:06:03.410025Z"}],"nvd":[{"id":"CVE-2025-14079","description":"The ELEX WordPress HelpDesk \u0026 Customer Ticketing System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.3.5. This is due to missing capability checks on the eh_crm_ticket_general function combined with a shared nonce that is exposed to low-privileged users. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify global WSDesk settings via the `eh_crm_ticket_general` AJAX action.","status":"published","published":"2026-02-05T10:16:02.05Z","modified":"2026-06-17T08:35:17.057Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:11:59.832225Z"}]}}