CVE-2025-47658

HIGH 8.8CVE-2025-47658 · Published 23/05/2025 · updated 17/06/2026

In short

CVE-2025-47658 is a HIGH (CVSS 8.8) vulnerability affecting wsdesk (elula).
Chance of exploitation in the next 30 days (EPSS): 0.44%, higher than 38.2% of all vulnerabilities.
Fix: update to 3.3.0 or later.

Package	Affected versions	Patched versions
wsdesk elula	`< 3.3.0`	`3.3.0`

Description

Unrestricted Upload of File with Dangerous Type vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Upload a Web Shell to a Web Server.This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from n/a through <= 3.2.9.

References

patchstack.com/database/Wordpress/Plugin/elex-helpdesk-customer-support-ticket-system/vulnerability/wordpress-elex-wordpress-helpdesk-customer-ticketing-system-3-2-7-arbitrary-file-upload-vulnerability · Third Party Advisory

More vulnerabilities in wsdesk

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

wsdesk

elula

< 3.3.0

3.3.0

Description

More vulnerabilities in wsdesk

See all →