awesomesupport vulnerabilities

CVEs per yearBy the year they were published

1. 20247
2. 20253
3. 20266

Newest CVEs

• CVE-2026-103370

  Awesome Support <= 6.4.1 - Authenticated (Custom+) Stored Cross-Site Scripting via Ticket Attachment MIME Confusion

  awesomesupport · Awesome Support – WordPress HelpDesk & Support Plugin

  Medium6.4
• CVE-2026-96268

  Awesome Support <= 6.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'gdpr-data' Parameter via wpas_gdpr_user_opt_out AJAX Action

  awesomesupport · Awesome Support – WordPress HelpDesk & Support Plugin

  Medium6.4
• CVE-2026-96820

  WordPress Awesome Support plugin <= 6.3.9 - Cross Site Scripting (XSS) vulnerability

  awesomesupport · Awesome Support

  High7.1
• CVE-2026-19946

  Awesome Support <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial via 'user_id' Parameter

  awesomesupport · Awesome Support – WordPress HelpDesk & Support Plugin

  Medium4.3
• CVE-2026-4654

  Awesome Support <= 6.3.7 - Authenticated (Subscriber+) Insecure Direct Object Reference to Unauthorized Ticket Reply Access via 'ticket_id' Parameter

  awesomesupport · Awesome Support – WordPress HelpDesk & Support Plugin

  Medium5.3
• CVE-2025-12641

  Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.6 - Missing Authorization to Unauthenticated Role Demotion

  awesomesupport · Awesome Support – WordPress HelpDesk & Support Plugin

  Medium6.5
• CVE-2025-58662

  WordPress Awesome Support plugin <= 6.3.5 - Deserialization of untrusted data vulnerability

  awesomesupport · Awesome Support

  High7.2
• CVE-2025-53340

  WordPress Awesome Support plugin <= 6.3.6 - Sensitive Data Exposure vulnerability

  awesomesupport · Awesome Support

  Medium5.3
• CVE-2024-13567

  Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

  awesomesupport · Awesome Support – WordPress HelpDesk & Support Plugin

  High7.5
• CVE-2024-54289

  WordPress Awesome Support plugin <= 6.3.1 - Broken Access Control vulnerability

  awesomesupport · Awesome Support

  Medium6.5