CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-103768 — The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is ...

·Source: NIST NVD

Updated:

Executive Summary

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.3.7 via the initMailPart function. This is due to insufficient file type validation when saving IMAP email attachments. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code executi

Analysis

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.3.7 via the initMailPart function. This is due to insufficient file type validation when saving IMAP email attachments. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible. CVSS Score: 9.8. Published: 2026-10-16T06:17:03.060.

Indicators of Compromise (1)

CVE (1)
CVE-2026-103768
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 16, 2026. Verified by: NIST.

Related Threats

LOWVulnerabilityNEW

Fintechs top banks and stablecoins for cheap cross-border payment - BIS research

Cross-border payments remain slow and expensive but fintech outfits such as Wise and Remitly have substantially cut costs relative to traditional retail bank wires while stabelcoins still suffer from issues with friction, according to BIS research.

Finextra
MEDIUMVulnerability

More and More Cyber Jobs Require AI Expertise

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/more-more-cyber-jobs-require-ai-expertise-image_small-2-a-33170.jpg" align=right hspace=4><b>But There's No Consensus Way to Assess Levels of Skill</b><br>A growing number of cybersecurity jobs require not just a baseline familiarity with AI tools, but significant AI expertise, according to an analysis of validated job vacancies i

Bank Info Security
MEDIUMVulnerability

New Acronis CEO Seeks MSP Growth Through Platform Expansion

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/new-acronis-ceo-seeks-msp-growth-through-platform-expansion-image_small-6-a-33168.jpg" align=right hspace=4><b>Company Looks to Extend Its Cyber Resilience Roots Into Managed Detection Services</b><br>Former WatchGuard CEO Prakash Panjwani is leading Acronis' push to consolidate MSP security spending through open MDR and XDR integ

Bank Info Security