CVE-2026-48964: Elextensions Elex WordPress Helpdesk & Customer Ticketing System

High severity, CVSS 8.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Subscriber SQL Injection in ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.6 versions.

Affected products

• Elextensions Elex WordPress Helpdesk & Customer Ticketing System: up to and including 3.3.6

Published 2026-06-15. Last modified 2026-06-17.