CVE-2025-12085 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System Plugin Setting eh_crm_settings_empty_trash authorization

A vulnerability classified as problematic has been found in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System Plugin up to 3.3.1 on WordPress. This affects the function eh_crm_settings_empty_trash of the component Setting Handler. The manipulation leads to missing authorization.

This vulnerability is listed as CVE-2025-12085. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More