Advisories · Technology
awesomesupport Awesome Support – WordPress HelpDesk & Support Plugin.
Every CVE that names awesomesupport Awesome Support – WordPress HelpDesk & Support Plugin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Awesome Support <= 6.4.1 - Authenticated (Custom+) Stored Cross-Site Scripting via Ticket Attachment MIME Confusion
- awesomesupport Awesome Support – WordPress HelpDesk & Support Plugin
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Awesome Support <= 6.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'gdpr-data' Parameter via wpas_gdpr_user_opt_out AJAX Action
- awesomesupport Awesome Support – WordPress HelpDesk & Support Plugin
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Awesome Support <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial via 'user_id' Parameter
- awesomesupport Awesome Support – WordPress HelpDesk & Support Plugin
- Broken access control
- CVSS 5.3 Medium
Awesome Support <= 6.3.7 - Authenticated (Subscriber+) Insecure Direct Object Reference to Unauthorized Ticket Reply Access via 'ticket_id' Parameter
- awesomesupport Awesome Support – WordPress HelpDesk & Support Plugin
- Broken access control
- CVSS 6.5 Medium
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.6 - Missing Authorization to Unauthenticated Role Demotion
- awesomesupport Awesome Support – WordPress HelpDesk & Support Plugin
- Broken access control
- CVSS 7.5 High
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
- awesomesupport Awesome Support – WordPress HelpDesk & Support Plugin
- Information disclosure
- CVSS 5.3 Medium
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via editor_html()
- awesomesupport Awesome Support – WordPress HelpDesk & Support Plugin
- Broken access control
- CVSS 4.3 Medium
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via wpas_get_users()
- awesomesupport Awesome Support – WordPress HelpDesk & Support Plugin
- Broken access control
- CVSS 8.8 High
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Authenticated (Subscriber+) SQL Injection
- awesomesupport Awesome Support – WordPress HelpDesk & Support Plugin
- SQL injection