Skip to contentAwesomesupport Awesome Support vulnerabilities
- awesomesupport awesome support – wordpress helpdesk & support pluginAwesome Support <= 6.4.1 - Authenticated (Custom+) Stored Cross-Site Scripting via Ticket Attachment MIME ConfusionCVE-2026-1033706.4 Medium
- awesomesupport awesome support – wordpress helpdesk & support pluginAwesome Support <= 6.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'gdpr-data' Parameter via wpas_gdpr_user_opt_out AJAX ActionCVE-2026-962686.4 Medium
- awesomesupport awesome supportWordPress Awesome Support plugin <= 6.3.9 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-968207.1 High
- awesomesupport awesome support – wordpress helpdesk & support pluginAwesome Support <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial via 'user_id' ParameterCVE-2026-199464.3 Medium
- awesomesupport awesome support – wordpress helpdesk & support pluginAwesome Support <= 6.3.7 - Authenticated (Subscriber+) Insecure Direct Object Reference to Unauthorized Ticket Reply Access via 'ticket_id' ParameterCVE-2026-46545.3 Medium
- awesomesupport awesome support – wordpress helpdesk & support pluginAwesome Support – WordPress HelpDesk & Support Plugin <= 6.3.6 - Missing Authorization to Unauthenticated Role DemotionCVE-2025-126416.5 Medium
- awesomesupport awesome supportWordPress Awesome Support plugin <= 6.3.5 - Deserialization of untrusted data vulnerabilityCVE-2025-586627.2 High
- awesomesupport awesome supportWordPress Awesome Support plugin <= 6.3.6 - Sensitive Data Exposure vulnerabilityCVE-2025-533405.3 Medium
- awesomesupport awesome support – wordpress helpdesk & support pluginAwesome Support – WordPress HelpDesk & Support Plugin <= 6.3.1 - Unauthenticated Sensitive Information Exposure Through Unprotected DirectoryCVE-2024-135677.5 High
- awesomesupport awesome supportWordPress Awesome Support plugin <= 6.3.1 - Broken Access Control vulnerabilityCVE-2024-542896.5 Medium
- awesomesupport awesome supportWordPress Awesome Support HelpDesk plugin <= 6.1.4 - Broken Access control vulnerabilityCVE-2023-483245.4 Medium
- awesomesupport awesome supportWordPress Awesome Support plugin <= 6.1.10 - Broken Access Control + CSRF vulnerabilityCVE-2023-497575.4 Medium
- awesomesupport awesome support, awesome support wordpress helpdesk \& support +1 moreWordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerabilityCVE-2023-498576.5 Medium
- awesome support team support, awesomesupport awesome support, awesome support wordpress helpdesk \& support +2 moreWordPress Awesome Support plugin <= 6.1.5 - Broken Access Control vulnerabilityCVE-2023-515375.3 Medium
- awesome support team support, awesomesupport awesome support +1 moreWordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerabilityCVE-2024-357414.3 Medium
- awesome support team support, awesomesupport awesome support +1 moreWordPress Awesome Support plugin <= 6.1.6 - Broken Access Control vulnerabilityCVE-2024-247165.4 Medium
- awesome support team support, awesomesupport awesome support, awesome support wordpress helpdesk \& support +2 moreWordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerabilityCVE-2024-305395.3 Medium
- awesomesupport awesome support – wordpress helpdesk & support plugin, getawesomesupport awesome support +1 moreAwesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via editor_html()CVE-2024-05965.3 Medium
- awesomesupport awesome support – wordpress helpdesk & support plugin, getawesomesupport awesome support +1 moreAwesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via wpas_get_users()CVE-2024-05954.3 Medium
- awesomesupport awesome support – wordpress helpdesk & support plugin, getawesomesupport awesome support +1 moreAwesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Authenticated (Subscriber+) SQL InjectionCVE-2024-05948.8 High
- awesome support team support – wordpress helpdesk & support plugin, awesomesupport awesome support – wordpress helpdesk & support plugin, getawesomesupport awesome support +2 moreWordPress Awesome Support Plugin <= 6.1.5 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-515384.3 Medium
- awesome support team support – wordpress helpdesk & support plugin, awesomesupport awesome support – wordpress helpdesk & support plugin, getawesomesupport awesome support +2 moreWordPress Awesome Support Plugin <= 6.1.4 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-483234.3 Medium
- awesomesupport awesome supportAwesome Support < 6.1.5 - Submitter+ Arbitrary File DeletionCVE-2023-53558.1 High
- awesomesupport awesome supportAwesome Support < 6.1.5 - Insufficient permission check in wpas_edit_replyCVE-2023-53524.3 Medium
- awesomesupport awesome supportAwesome Support < 6.1.5 - Reflected Cross-Site ScriptingCVE-2023-53546.1 Medium
- awesomesupport awesome supportAwesome Support < 6.1.2 - Subscriber+ Arbitrary Exported Tickets DownloadCVE-2022-35116.5 Medium