Skip to content

Awesomesupport vulnerabilities

Products

Newest

awesomesupport awesome support – wordpress helpdesk & support plugin Awesome Support <= 6.4.1 - Authenticated (Custom+) Stored Cross-Site Scripting via Ticket Attachment MIME Confusion CVE-2026-103370 6.4 MediumOctober 28, 2026
awesomesupport awesome support – wordpress helpdesk & support plugin Awesome Support <= 6.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'gdpr-data' Parameter via wpas_gdpr_user_opt_out AJAX Action CVE-2026-96268 6.4 MediumOctober 1, 2026
awesomesupport awesome support WordPress Awesome Support plugin <= 6.3.9 - Cross Site Scripting (XSS) vulnerability CVE-2026-96820 7.1 HighSeptember 30, 2026
awesomesupport awesome support – wordpress helpdesk & support plugin Awesome Support <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial via 'user_id' Parameter CVE-2026-19946 4.3 MediumSeptember 9, 2026
awesomesupport awesome support – wordpress helpdesk & support plugin Awesome Support <= 6.3.7 - Authenticated (Subscriber+) Insecure Direct Object Reference to Unauthorized Ticket Reply Access via 'ticket_id' Parameter CVE-2026-4654 5.3 MediumApril 8, 2026
awesomesupport awesome support – wordpress helpdesk & support plugin Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.6 - Missing Authorization to Unauthenticated Role Demotion CVE-2025-12641 6.5 MediumJanuary 16, 2026
awesomesupport awesome support WordPress Awesome Support plugin <= 6.3.5 - Deserialization of untrusted data vulnerability CVE-2025-58662 7.2 HighSeptember 22, 2025
awesomesupport awesome support WordPress Awesome Support plugin <= 6.3.6 - Sensitive Data Exposure vulnerability CVE-2025-53340 5.3 MediumSeptember 9, 2025
awesomesupport awesome support – wordpress helpdesk & support plugin Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory CVE-2024-13567 7.5 HighApril 1, 2025
awesomesupport awesome support WordPress Awesome Support plugin <= 6.3.1 - Broken Access Control vulnerability CVE-2024-54289 6.5 MediumDecember 13, 2024
awesomesupport awesome support WordPress Awesome Support HelpDesk plugin <= 6.1.4 - Broken Access control vulnerability CVE-2023-48324 5.4 MediumDecember 9, 2024
awesomesupport awesome support WordPress Awesome Support plugin <= 6.1.10 - Broken Access Control + CSRF vulnerability CVE-2023-49757 5.4 MediumDecember 9, 2024
awesomesupport awesome support, awesome support wordpress helpdesk \& support +1 more WordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability CVE-2023-49857 6.5 MediumDecember 9, 2024
awesome support team support, awesomesupport awesome support, awesome support wordpress helpdesk \& support +2 more WordPress Awesome Support plugin <= 6.1.5 - Broken Access Control vulnerability CVE-2023-51537 5.3 MediumJune 12, 2024
awesome support team support, awesomesupport awesome support +1 more WordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability CVE-2024-35741 4.3 MediumJune 10, 2024
awesome support team support, awesomesupport awesome support +1 more WordPress Awesome Support plugin <= 6.1.6 - Broken Access Control vulnerability CVE-2024-24716 5.4 MediumJune 9, 2024
awesome support team support, awesomesupport awesome support, awesome support wordpress helpdesk \& support +2 more WordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability CVE-2024-30539 5.3 MediumJune 9, 2024
awesomesupport awesome support – wordpress helpdesk & support plugin, getawesomesupport awesome support +1 more Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via editor_html() CVE-2024-0596 5.3 MediumFebruary 10, 2024
awesomesupport awesome support – wordpress helpdesk & support plugin, getawesomesupport awesome support +1 more Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via wpas_get_users() CVE-2024-0595 4.3 MediumFebruary 10, 2024
awesomesupport awesome support – wordpress helpdesk & support plugin, getawesomesupport awesome support +1 more Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Authenticated (Subscriber+) SQL Injection CVE-2024-0594 8.8 HighFebruary 10, 2024
awesome support team support – wordpress helpdesk & support plugin, awesomesupport awesome support – wordpress helpdesk & support plugin, getawesomesupport awesome support +2 more WordPress Awesome Support Plugin <= 6.1.5 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-51538 4.3 MediumJanuary 5, 2024
awesome support team support – wordpress helpdesk & support plugin, awesomesupport awesome support – wordpress helpdesk & support plugin, getawesomesupport awesome support +2 more WordPress Awesome Support Plugin <= 6.1.4 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-48323 4.3 MediumNovember 30, 2023
awesomesupport awesome support Awesome Support < 6.1.5 - Submitter+ Arbitrary File Deletion CVE-2023-5355 8.1 HighNovember 6, 2023
awesomesupport awesome support Awesome Support < 6.1.5 - Insufficient permission check in wpas_edit_reply CVE-2023-5352 4.3 MediumNovember 6, 2023
awesomesupport awesome support Awesome Support < 6.1.5 - Reflected Cross-Site Scripting CVE-2023-5354 6.1 MediumNovember 6, 2023
awesomesupport awesome support Awesome Support < 6.1.2 - Subscriber+ Arbitrary Exported Tickets Download CVE-2022-3511 6.5 MediumNovember 28, 2022