Privilege escalation in Elextensions Elex WordPress Helpdesk & Customer Ticketing System
CVE-2025-13534
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.3.2. This is due to missing authorization checks on the eh_crm_edit_agent AJAX action. This makes it possible for authenticated attackers, with Contributor-level access and above, to escalate their WSDesk privileges from limited "Reply Tickets" permissions to full helpdesk administrator capabilities, gaining unauthorized access to ticket management, settings configuration, agent administration, and sensitive customer data.
Vulnerability class: Privilege Escalation
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.
EPSS exploit prediction
EPSS: 0.003 (17.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 17th percentile — 17.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000
Affected products
Weakness classification (CWE)
References
- www.wordfence.com/threat-intel/vulnerabilities/id/3541794b-7c8a-42f8-9688-7f3db… (Product, Third Party Advisory)
- plugins.trac.wordpress.org/browser/elex-helpdesk-customer-support-ticket-system… (Product)
- plugins.trac.wordpress.org/browser/elex-helpdesk-customer-support-ticket-system… (Product)
- plugins.trac.wordpress.org/browser/stm-gallery/trunk/stmgallery_v.0.9.php (Broken Link)
Frequently asked questions
- What is CVE-2025-13534?
- CVE-2025-13534 is a medium-severity vulnerability in Elextensions Elex WordPress Helpdesk & Customer Ticketing System, classified under Improper Privilege Management. CVSS score: 6.3/10. Published 2025-12-02.
- How severe is CVE-2025-13534?
- Medium severity. CVSS v3 base score is 6.3 out of 10.