agentprime: awesomesupport-awesome-support-wordpress-helpdesk-support-pluginEvery new CVE for awesomesupport-awesome-support-wordpress-helpdesk-support-plugin.https://agentprime.io/CVE-2026-103370: Awesome Support <= 6.4.1 - Authenticated (Custom+) Stored Cross-Site Scripting via Ticket Attachment MIME Confusionhttps://agentprime.io/advisories/CVE-2026-103370/https://agentprime.io/advisories/CVE-2026-103370/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 06:45:05 GMTCVECVE-2026-96268: Awesome Support <= 6.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'gdpr-data' Parameter via wpas_gdpr_user_opt_out AJAX Actionhttps://agentprime.io/advisories/CVE-2026-96268/https://agentprime.io/advisories/CVE-2026-96268/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 08:28:44 GMTCVECVE-2026-19946: Awesome Support <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial via 'user_id' Parameterhttps://agentprime.io/advisories/CVE-2026-19946/https://agentprime.io/advisories/CVE-2026-19946/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 05:31:03 GMTCVECVE-2026-4654: Awesome Support <= 6.3.7 - Authenticated (Subscriber+) Insecure Direct Object Reference to Unauthorized Ticket Reply Access via 'ticket_id' Parameterhttps://agentprime.io/advisories/CVE-2026-4654/https://agentprime.io/advisories/CVE-2026-4654/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 07:43:02 GMTCVECVE-2025-12641: Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.6 - Missing Authorization to Unauthenticated Role Demotionhttps://agentprime.io/advisories/CVE-2025-12641/https://agentprime.io/advisories/CVE-2025-12641/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Jan 2026 04:44:34 GMTCVECVE-2024-13567: Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directoryhttps://agentprime.io/advisories/CVE-2024-13567/https://agentprime.io/advisories/CVE-2024-13567/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Apr 2025 05:22:45 GMTCVECVE-2024-0596: Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via editor_html()https://agentprime.io/advisories/CVE-2024-0596/https://agentprime.io/advisories/CVE-2024-0596/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Feb 2024 06:51:52 GMTCVECVE-2024-0595: Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via wpas_get_users()https://agentprime.io/advisories/CVE-2024-0595/https://agentprime.io/advisories/CVE-2024-0595/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Feb 2024 06:51:52 GMTCVECVE-2024-0594: Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Authenticated (Subscriber+) SQL Injectionhttps://agentprime.io/advisories/CVE-2024-0594/https://agentprime.io/advisories/CVE-2024-0594/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Feb 2024 06:51:51 GMTCVE