Privilege Escalation Vulnerability in ELEX WordPress HelpDesk Plugin

CVE-2024-12171

What is CVE-2024-12171?

The ELEX WordPress HelpDesk & Customer Ticketing System plugin is susceptible to privilege escalation due to a lack of capability checks in its AJAX actions. As a result, authenticated users with Subscriber-level access and higher can exploit this vulnerability to create new administrative user accounts, compromising the security of the WordPress site. This vulnerability impacts all versions up to and including 3.2.6, necessitating prompt action from site administrators to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References