Skip to contentAwesomesupport Awesome Support – Wordpress Helpdesk & Support Plugin vulnerabilities
- awesomesupport awesome support – wordpress helpdesk & support pluginAwesome Support <= 6.4.1 - Authenticated (Custom+) Stored Cross-Site Scripting via Ticket Attachment MIME ConfusionCVE-2026-1033706.4 Medium
- awesomesupport awesome support – wordpress helpdesk & support pluginAwesome Support <= 6.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'gdpr-data' Parameter via wpas_gdpr_user_opt_out AJAX ActionCVE-2026-962686.4 Medium
- awesomesupport awesome support – wordpress helpdesk & support pluginAwesome Support <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial via 'user_id' ParameterCVE-2026-199464.3 Medium
- awesomesupport awesome support – wordpress helpdesk & support pluginAwesome Support <= 6.3.7 - Authenticated (Subscriber+) Insecure Direct Object Reference to Unauthorized Ticket Reply Access via 'ticket_id' ParameterCVE-2026-46545.3 Medium
- awesomesupport awesome support – wordpress helpdesk & support pluginAwesome Support – WordPress HelpDesk & Support Plugin <= 6.3.6 - Missing Authorization to Unauthenticated Role DemotionCVE-2025-126416.5 Medium
- awesomesupport awesome support – wordpress helpdesk & support pluginAwesome Support – WordPress HelpDesk & Support Plugin <= 6.3.1 - Unauthenticated Sensitive Information Exposure Through Unprotected DirectoryCVE-2024-135677.5 High
- awesomesupport awesome support – wordpress helpdesk & support plugin, getawesomesupport awesome support +1 moreAwesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via editor_html()CVE-2024-05965.3 Medium
- awesomesupport awesome support – wordpress helpdesk & support plugin, getawesomesupport awesome support +1 moreAwesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via wpas_get_users()CVE-2024-05954.3 Medium
- awesomesupport awesome support – wordpress helpdesk & support plugin, getawesomesupport awesome support +1 moreAwesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Authenticated (Subscriber+) SQL InjectionCVE-2024-05948.8 High
- awesome support team support – wordpress helpdesk & support plugin, awesomesupport awesome support – wordpress helpdesk & support plugin, getawesomesupport awesome support +2 moreWordPress Awesome Support Plugin <= 6.1.5 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-515384.3 Medium
- awesome support team support – wordpress helpdesk & support plugin, awesomesupport awesome support – wordpress helpdesk & support plugin, getawesomesupport awesome support +2 moreWordPress Awesome Support Plugin <= 6.1.4 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-483234.3 Medium