Skip to content
Noroxi

elula records

10 published records for vendor elula.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
10%
Median publish → KEV
No record has entered KEV

Records by year

  1. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

10 records
  • CVE-2025-11456
    39Monitor

    ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Unauthenticated Arbitrary File Upload

    CriticalCVSS 9.8No exploitEPSS 1%

    elula · wsdeskNov 21, 2025

  • CVE-2024-12171
    35Monitor

    ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

    HighCVSS 8.8No exploitEPSS 1%

    elula · wsdeskFeb 1, 2025

  • CVE-2025-47658
    35Monitor

    WordPress ELEX HelpDesk & Customer Ticketing System plugin <= 3.2.9 - Arbitrary File Upload vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    elula · wsdeskMay 23, 2025

  • CVE-2025-13534
    35Monitor

    ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.2 - Authenticated (Contributor+) Privilege Escalation via eh_crm_edit_agent AJAX Action

    HighCVSS 8.8No exploitEPSS 0%

    elula · wsdeskDec 2, 2025

  • CVE-2025-10039
    17Monitor

    ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.9 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_clien

    MediumCVSS 4.3No exploitEPSS 0%

    elula · wsdeskNov 21, 2025

  • CVE-2025-10054
    17Monitor

    ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Role Removal

    MediumCVSS 4.3No exploitEPSS 0%

    elula · wsdeskNov 21, 2025

  • CVE-2025-12169
    17Monitor

    ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.0 - Missing Authorization to Authenitcated (Subscriber+) to Scheduled Trigger Deletion

    MediumCVSS 4.3No exploitEPSS 0%

    elula · wsdeskNov 21, 2025

  • CVE-2025-12085
    17Monitor

    ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Empty

    MediumCVSS 4.3No exploitEPSS 0%

    elula · wsdeskNov 21, 2025

  • CVE-2025-12022
    17Monitor

    ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Restore

    MediumCVSS 4.3No exploitEPSS 0%

    elula · wsdeskNov 21, 2025

  • CVE-2025-12023
    17Monitor

    ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Ticket Restore

    MediumCVSS 4.3No exploitEPSS 0%

    elula · wsdeskNov 21, 2025