CVE-2026-103768

{
  "etk_id": "ETK-2026-1753",
  "cve_id": "CVE-2026-103768",
  "display_id": "CVE-2026-103768",
  "ghsa_id": "GHSA-cmp5-h7xc-wwx6",
  "euvd_id": "EUVD-2026-102673",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated arbitrary file upload in ELEX WordPress HelpDesk",
  "summary": "ELEX WordPress HelpDesk & Customer Ticketing System versions through 3.3.7 are affected by insufficient validation of files saved from IMAP email attachments. An unauthenticated attacker may upload an executable file and potentially achieve remote code execution. Exposure requires the plugin's IMAP attachment-processing functionality to be reachable.",
  "mitigation": "Disable or restrict the plugin's IMAP email-attachment processing and prevent uploaded attachment files from being executed by the web server. Upgrade to a vendor release that addresses the issue when one is published; no fixed version is recorded.",
  "vendor": "elextensions",
  "product": "ELEX WordPress HelpDesk & Customer Ticketing System",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 3.3.7"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "ELEX WordPress HelpDesk & Customer Ticketing System",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 9.8,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": 0.0058,
  "epss_percentile": 0.4657,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 54.989027166666666,
  "t0_at": "2026-10-16T05:30:25.043000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-16T05:30:25.043000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-16T05:30:25.043000+00:00",
      "url": "https://github.com/advisories/GHSA-cmp5-h7xc-wwx6"
    }
  }
}