SecAlerts
e

elula

Security Risk Profile

39
/100
low

Security Risk Score

Comprehensive risk assessment based on 10 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from February 1, 2025 to present

10
Total CVEs
4
Critical+High
0
Exploited
2
Unpatched

Threat Assessment

Avg CVSS
6.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
39/100
low

Severity Distribution

Critical
2
High
2
Medium
6
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
1

Age Distribution

Common Weaknesses (CWE)

1
Malicious File Upload
2

Most Affected Products

1. ELEX WordPress HelpDesk & Customer Ticketing System10
2. Elula Wsdesk Wordpress10

Recent Vulnerabilities

See more →
CVE-2025-13534
CVSS 8.8high

ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.2 - Authenticated (Contributor+) Privilege Escalation via eh_crm_edit_agent AJAX Action

Dec 2, 2025🔧 No Patch
CVE-2025-10039
CVSS 4.3medium

ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.9 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_client'

Nov 21, 2025🔧 No Patch
CVE-2025-10054
CVSS 4.3medium

ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Role Removal

Nov 21, 2025🔧 No Patch
CVE-2025-11456
CVSS 9.8critical

ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Unauthenticated Arbitrary File Upload

Nov 21, 2025
CVE-2025-12169
CVSS 4.3medium

ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.0 - Missing Authorization to Authenitcated (Subscriber+) to Scheduled Trigger Deletion

Nov 21, 2025🔧 No Patch
CVE-2025-12022
CVSS 4.3medium

ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Restore

Nov 21, 2025🔧 No Patch
CVE-2025-12023
CVSS 4.3medium

ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Ticket Restore

Nov 21, 2025🔧 No Patch
CVE-2025-12085
CVSS 4.3medium

ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Empty

Nov 21, 2025🔧 No Patch
CVE-2025-47658
CVSS 9.9EPSS 0%critical

WordPress ELEX HelpDesk & Customer Ticketing System plugin <= 3.2.9 - Arbitrary File Upload vulnerability

May 23, 2025🔧 No Patch
CVE-2024-12171
CVSS 8.8high

ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

Feb 1, 2025

Monitor elula in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.

elula Security Vulnerabilities & Risk Score | 10 CVEs | SecAlerts - SecAlerts