Log in Start free

awesomesupport

Products

ProductCVEsExploitedLatest
Awesome Support – WordPress HelpDesk & Support Plugin9–Oct 28, 2026
Awesome Support7–Sep 30, 2026

Exploited and recent CVEs

  • CVE-2026-103370 Medium 6.4 Awesome Support <= 6.4.1 - Authenticated (Custom+) Stored Cross-Site Scripting via Ticket Attachment MIME Confusion 0.3%
  • CVE-2026-96268 Medium 6.4 Awesome Support <= 6.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'gdpr-data' Parameter via wpas_gdpr_user_opt_out AJAX Action 0.2%
  • CVE-2026-96820 High 7.1 WordPress Awesome Support plugin <= 6.3.9 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-19946 Medium 4.3 Awesome Support <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial via 'user_id' Parameter 0.3%
  • CVE-2026-4654 Medium 5.3 Awesome Support <= 6.3.7 - Authenticated (Subscriber+) Insecure Direct Object Reference to Unauthorized Ticket Reply Access via 'ticket_id' Parameter 0.3%
  • CVE-2025-12641 Medium 6.5 Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.6 - Missing Authorization to Unauthenticated Role Demotion 0.4%
  • CVE-2025-58662 High 7.2 WordPress Awesome Support plugin <= 6.3.5 - Deserialization of untrusted data vulnerability 0.5%
  • CVE-2025-53340 Medium 5.3 WordPress Awesome Support plugin <= 6.3.6 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2024-13567 High 7.5 Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory 0.7%
  • CVE-2024-54289 Medium 6.5 WordPress Awesome Support plugin <= 6.3.1 - Broken Access Control vulnerability 0.6%
  • CVE-2023-48324 Medium 5.4 WordPress Awesome Support HelpDesk plugin <= 6.1.4 - Broken Access control vulnerability 0.5%
  • CVE-2023-49757 Medium 5.4 WordPress Awesome Support plugin <= 6.1.10 - Broken Access Control + CSRF vulnerability 0.5%
  • CVE-2023-49857 Medium 6.5 WordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability 0.5%
  • CVE-2024-0596 Medium 5.3 Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via editor_html() 0.4%
  • CVE-2024-0595 Medium 4.3 Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via wpas_get_users() 0.4%
  • CVE-2024-0594 High 8.8 Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Authenticated (Subscriber+) SQL Injection 0.6%