elula kayıtları
elula üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %10
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-862 Missing Authorization6
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-269 Improper Privilege Management1
- CWE-639 Authorization Bypass Through User-Controlled Key1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2025-11456İstismar yok | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Unauthenticated Arbitrary File Uploadelula · wsdesk · CWE-434 | Kritik9,8 | — | %0,7 | 21 Kas 2025 |
35İzleyin | CVE-2024-12171İstismar yok | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalationelula · wsdesk · CWE-862 | Yüksek8,8 | — | %0,5 | 1 Şub 2025 |
35İzleyin | CVE-2025-47658İstismar yok | WordPress ELEX HelpDesk & Customer Ticketing System plugin <= 3.2.9 - Arbitrary File Upload vulnerabilityelula · wsdesk · CWE-434 | Yüksek8,8 | — | %0,4 | 23 May 2025 |
35İzleyin | CVE-2025-13534İstismar yok | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.2 - Authenticated (Contributor+) Privilege Escalation via eh_crm_edit_agent AJAX Actionelula · wsdesk · CWE-269 | Yüksek8,8 | — | %0,3 | 2 Ara 2025 |
17İzleyin | CVE-2025-10039İstismar yok | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.9 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_clienelula · wsdesk · CWE-639 | Orta4,3 | — | %0,3 | 21 Kas 2025 |
17İzleyin | CVE-2025-10054İstismar yok | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Role Removalelula · wsdesk · CWE-862 | Orta4,3 | — | %0,3 | 21 Kas 2025 |
17İzleyin | CVE-2025-12169İstismar yok | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.0 - Missing Authorization to Authenitcated (Subscriber+) to Scheduled Trigger Deletionelula · wsdesk · CWE-862 | Orta4,3 | — | %0,2 | 21 Kas 2025 |
17İzleyin | CVE-2025-12085İstismar yok | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Emptyelula · wsdesk · CWE-862 | Orta4,3 | — | %0,2 | 21 Kas 2025 |
17İzleyin | CVE-2025-12022İstismar yok | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Restoreelula · wsdesk · CWE-862 | Orta4,3 | — | %0,2 | 21 Kas 2025 |
17İzleyin | CVE-2025-12023İstismar yok | ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Ticket Restoreelula · wsdesk · CWE-862 | Orta4,3 | — | %0,2 | 21 Kas 2025 |
- CVE-2025-1145639İzleyin
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Unauthenticated Arbitrary File Upload
KritikCVSS 9,8İstismar yokEPSS %1elula · wsdesk21 Kas 2025
- CVE-2024-1217135İzleyin
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
YüksekCVSS 8,8İstismar yokEPSS %1elula · wsdesk1 Şub 2025
- CVE-2025-4765835İzleyin
WordPress ELEX HelpDesk & Customer Ticketing System plugin <= 3.2.9 - Arbitrary File Upload vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0elula · wsdesk23 May 2025
- CVE-2025-1353435İzleyin
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.2 - Authenticated (Contributor+) Privilege Escalation via eh_crm_edit_agent AJAX Action
YüksekCVSS 8,8İstismar yokEPSS %0elula · wsdesk2 Ara 2025
- CVE-2025-1003917İzleyin
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.9 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_clien
OrtaCVSS 4,3İstismar yokEPSS %0elula · wsdesk21 Kas 2025
- CVE-2025-1005417İzleyin
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Role Removal
OrtaCVSS 4,3İstismar yokEPSS %0elula · wsdesk21 Kas 2025
- CVE-2025-1216917İzleyin
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.0 - Missing Authorization to Authenitcated (Subscriber+) to Scheduled Trigger Deletion
OrtaCVSS 4,3İstismar yokEPSS %0elula · wsdesk21 Kas 2025
- CVE-2025-1208517İzleyin
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Empty
OrtaCVSS 4,3İstismar yokEPSS %0elula · wsdesk21 Kas 2025
- CVE-2025-1202217İzleyin
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Restore
OrtaCVSS 4,3İstismar yokEPSS %0elula · wsdesk21 Kas 2025
- CVE-2025-1202317İzleyin
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Ticket Restore
OrtaCVSS 4,3İstismar yokEPSS %0elula · wsdesk21 Kas 2025