Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Elula

First CVE: Feb 1, 2025Active for: 1 yearTotal CVEs: 10
29.1
VTI Score
Low

Elula maintains a narrowly focused endpoint-management product, WSDesk, that despite modest disclosure volume occupies a notable position in the vulnerability landscape as a widely deployed administrative tool. The recurring weakness classes—missing authorization, unrestricted file uploads, authorization bypass through user-controlled keys, and improper privilege management—reflect the access-control and input-handling demands of software that manages endpoint configurations and credentials, where flaws in authentication or validation can directly compromise managed systems. Defenders should prioritize WSDesk deployments for exposure review and treatment of administrative boundaries; live severity, exploitation, and exposure counts are shown alongside this summary.

FAUCET AI Generated
10
Total CVEs
More Total CVEs than 92% of tracked vendors
10.0
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 99% of tracked vendors
6.2
Avg CVSS Score
Higher Avg CVSS Score than 35% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Elula over time

Volume of CVEsAvg CVSS Base Score
First CVE
Feb 1, 2025
17 months ago
Most Recent CVE
Dec 2, 2025
234 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (10 CVEs).

10 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2025-11456CRITICAL
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the eh_crm_new_ticket_po
Nov 21, 20259.833NONO
CVE-2025-13534HIGH
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.3.2. This is due to missi
Dec 2, 20258.827NONO
CVE-2024-12171HIGH
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the 'eh_crm_agent_add_user'
Feb 1, 20258.825NONO
CVE-2025-47658HIGH
Unrestricted Upload of File with Dangerous Type vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allow
May 23, 20258.824NONO
CVE-2025-12169MEDIUM
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wp_ajax_eh
Nov 21, 20254.318NONO
CVE-2025-12023MEDIUM
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the eh_crm_rest
Nov 21, 20254.318NONO
CVE-2025-12022MEDIUM
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'eh_crm_set
Nov 21, 20254.318NONO
CVE-2025-10054MEDIUM
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'eh_crm_rem
Nov 21, 20254.317NONO
CVE-2025-10039MEDIUM
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.9 via the '
Nov 21, 20254.317NONO
CVE-2025-12085MEDIUM
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'eh_crm_set
Nov 21, 20254.317NONO
View all 10 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products10 CVEs
60%
30%
10%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network10 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low10 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None10 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low9 (90.0%)
High0 (0.0%)
None1 (10.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (10 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Elula.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Elula — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Elula's Products

View all 2 CNAs →

Top CWEs