A vulnerability categorized as problematic has been discovered in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System Plugin up to 3.3.5 on WordPress. This affects the function
eh_crm_ticket_general of the component Setting Handler. The manipulation results in missing authorization.
This vulnerability was named CVE-2025-14079. The attack may be performed from remote. There is no available exploit.