Elula vulnerabilities
We track 4 vulnerabilities in Elula products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on December 2, 2025.
Latest Elula vulnerabilities
- 8.8 High severity
ELEX WordPress HelpDesk & Customer Ticketing…: Improper Privilege Management
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.3.2. This is due to missing authorization checks on the eh_crm_edit_agent AJAX action. This makes it poss
- 9.8 Critical severity
ELEX WordPress HelpDesk & Customer Ticketing…: Unrestricted Upload of File with Dangerous Type
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the eh_crm_new_ticket_post() function in all versions up to, and including, 3.3.1. This makes it possibl
- 8.8 High severity
ELEX WordPress HelpDesk & Customer Ticketing…: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Upload a Web Shell to a Web Server.This issue affects ELEX WordPress HelpDesk
- 8.8 High severity
ELEX WordPress HelpDesk & Customer Ticketing…: Missing Authorization
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the 'eh_crm_agent_add_user' AJAX action in all versions up to, and including, 3.2.6. This makes it possible