ELEX WordPress HelpDesk and Customer Ticketing System Insecure Direct Object Reference Vulnerability

A vulnerability allowing Insecure Direct Object Reference (IDOR) has been identified in the ELEX WordPress HelpDesk & Customer Ticketing System plugin, affecting all versions up to and including 3.2.9. The vulnerability arises from insufficient validation of user-controlled keys in the 'eh_crm_ticket_single_view_client' function. This flaw enables authenticated attackers with Subscriber-level access or higher to access and read the contents of all support tickets.

Impact

Exploitation of this vulnerability allows unauthorized access to all support tickets, potentially leading to exposure of sensitive information.

Reproduction

To reproduce this vulnerability, an authenticated user with Subscriber-level access or higher can send a request to the 'eh_crm_ticket_single_view_client' endpoint with a user-controlled 'ticket_id' parameter. The absence of proper validation on this parameter will allow access to tickets that the user should not be able to view.

Remediation

Users are advised to update the ELEX WordPress HelpDesk & Customer Ticketing System plugin to version 3.3.0 or later.