Elula Wsdesk vulnerabilities

• elextensions elex wordpress helpdesk & customer ticketing system, elula wsdesk +1 more ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.2 - Authenticated (Contributor+) Privilege Escalation via eh_crm_edit_agent AJAX Action CVE-2025-13534 6.3 MediumDecember 2, 2025
• elextensions elex wordpress helpdesk & customer ticketing system, elula wsdesk +1 more ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.9 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_client' CVE-2025-10039 4.3 MediumNovember 21, 2025
• elextensions elex wordpress helpdesk & customer ticketing system, elula wsdesk +1 more ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Role Removal CVE-2025-10054 4.3 MediumNovember 21, 2025
• elextensions elex wordpress helpdesk & customer ticketing system, elula wsdesk +1 more ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Unauthenticated Arbitrary File Upload CVE-2025-11456 9.8 CriticalNovember 21, 2025
• elextensions elex wordpress helpdesk & customer ticketing system, elula wsdesk +1 more ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.0 - Missing Authorization to Authenitcated (Subscriber+) to Scheduled Trigger Deletion CVE-2025-12169 4.3 MediumNovember 21, 2025
• elextensions elex wordpress helpdesk & customer ticketing system, elula wsdesk +1 more ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Restore CVE-2025-12022 4.3 MediumNovember 21, 2025
• elextensions elex wordpress helpdesk & customer ticketing system, elula wsdesk +1 more ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Empty CVE-2025-12085 4.3 MediumNovember 21, 2025
• elextensions elex wordpress helpdesk & customer ticketing system, elula wsdesk +1 more ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Ticket Restore CVE-2025-12023 4.3 MediumNovember 21, 2025
• elextensions elex wordpress helpdesk & customer ticketing system, elula wsdesk +1 more WordPress ELEX HelpDesk & Customer Ticketing System plugin <= 3.2.9 - Arbitrary File Upload vulnerability CVE-2025-47658 9.9 CriticalMay 23, 2025
• elextensions elex wordpress helpdesk & customer ticketing system, elula wsdesk +1 more ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation CVE-2024-12171 8.8 HighFebruary 1, 2025