EL
Vendor
Elula
10
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-13534 | WS Wsdesk Elula | 8.8 | Dec 2 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.2 - Authenticated (Contributor+) Privilege Escalation via eh_crm_edit_agent AJAX Action |
| CVE-2025-10039 | WS Wsdesk Elula | 4.3 | Nov 21 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.9 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_client' |
| CVE-2025-10054 | WS Wsdesk Elula | 4.3 | Nov 21 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Role Removal |
| CVE-2025-11456 | WS Wsdesk Elula | 9.8 | Nov 21 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Unauthenticated Arbitrary File Upload |
| CVE-2025-12169 | WS Wsdesk Elula | 4.3 | Nov 21 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.0 - Missing Authorization to Authenitcated (Subscriber+) to Scheduled Trigger Deletion |
| CVE-2025-12022 | WS Wsdesk Elula | 4.3 | Nov 21 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Restore |
| CVE-2025-12085 | WS Wsdesk Elula | 4.3 | Nov 21 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Empty |
| CVE-2025-12023 | WS Wsdesk Elula | 4.3 | Nov 21 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Ticket Restore |
| CVE-2025-47658 | WS Wsdesk Elula | 8.8 | May 23 | WordPress ELEX HelpDesk & Customer Ticketing System plugin <= 3.2.9 - Arbitrary File Upload vulnerability |
| CVE-2024-12171 | WS Wsdesk Elula | 8.8 | Feb 1 | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation |
