Skip to content
Threat Feed
Subscribe

Product

ELEX WordPress HelpDesk & Customer Ticketing System (<= 3.3.8)

1 brief RSS
critical advisory

ELEX WordPress HelpDesk & Customer Ticketing System: Arbitrary file deletion (CVE-2026-114630)

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress contains an arbitrary file deletion vulnerability in the factory_reset function that allows unauthenticated attackers to delete critical system files, potentially leading to remote code execution.

ELEX WordPress HelpDesk & Customer Ticketing System web-application vulnerability wordpress file-deletion
1r 2t 1c