PT-2026-146920
CVE-2026-125855
·
Published
2026-11-13
·
Updated
2026-11-14
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Elextensions ELEX WordPress HelpDesk & Customer Ticketing System versions prior to 3.3.9
Description
An unsafe deserialization issue allows Object Injection when the system processes untrusted data. This flaw can be exploited remotely without requiring authentication.
Recommendations
Update Elextensions ELEX WordPress HelpDesk & Customer Ticketing System to version 3.3.9 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾