CVE-2026-114630 - ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.8 - Unauthenticated Arbitrary File Deletion via 'ticket_attachment_path' Parameter
CVE ID :CVE-2026-114630 Published : 6 Nov 2026, 12:17 p.m. | 53 minutes ago Description :The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the factory_reset function in all versions...