VendorsElulawsdeskall versions
Vulnerabilities

Elula Tech WSDesk ELEX WordPress HelpDesk & Customer Ticketing System

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10CVEs
CVE-2025-47658
WordPress ELEX HelpDesk & Customer Ticketing System plugin <= 3.2.9 - Arbitrary File Upload vulnerability
Published 2025-05-23 · Modified
9.9EPSS 0.004
CVE-2025-11456
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Unauthenticated Arbitrary File Upload
Published 2025-11-21 · Analyzed
9.8EPSS 0.007
CVE-2024-12171
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Published 2025-02-01 · Analyzed
8.8EPSS 0.005
CVE-2025-13534
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.2 - Authenticated (Contributor+) Privilege Escalation via eh_crm_edit_agent AJAX Action
Published 2025-12-02 · Analyzed
8.8EPSS 0.003
CVE-2025-10039
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.9 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_client'
Published 2025-11-21 · Analyzed
4.3EPSS 0.003
CVE-2025-10054
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Role Removal
Published 2025-11-21 · Modified
4.3EPSS 0.003
CVE-2025-12022
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Restore
Published 2025-11-21 · Analyzed
4.3EPSS 0.002
CVE-2025-12023
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Ticket Restore
Published 2025-11-21 · Analyzed
4.3EPSS 0.002
CVE-2025-12085
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Empty
Published 2025-11-21 · Analyzed
4.3EPSS 0.002
CVE-2025-12169
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.0 - Missing Authorization to Authenitcated (Subscriber+) to Scheduled Trigger Deletion
Published 2025-11-21 · Analyzed
4.3EPSS 0.002