CVE-2026-103768 | elextensions HelpDesk & Customer Ticketing System Plugin up to 3.3.7 on WordPress File Type Validation initMailPart unrestricted upload

October 16, 2026 Yanac

A vulnerability was found in elextensions HelpDesk & Customer Ticketing System Plugin up to 3.3.7 on WordPress and classified as critical. Affected by this vulnerability is the function initMailPart of the component File Type Validation. Such manipulation leads to unrestricted upload.

This vulnerability is traded as CVE-2026-103768. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More