VendorsGetawesomesupportawesome_supportall versions
Vulnerabilities

Getawesomesupport Awesome Support

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

20CVEs
CVE-2024-30539
WordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability
Published 2024-06-09 · Modified
9.8EPSS 0.004
CVE-2024-0594
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Authenticated (Subscriber+) SQL Injection
Published 2024-02-10 · Modified
8.8EPSS 0.006
CVE-2024-35741
WordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability
Published 2024-06-10 · Modified
8.8EPSS 0.003
CVE-2023-48323
WordPress Awesome Support Plugin <= 6.1.4 is vulnerable to Cross Site Request Forgery (CSRF)
Published 2023-11-30 · Modified
8.8EPSS 0.002
CVE-2023-51538
WordPress Awesome Support Plugin <= 6.1.5 is vulnerable to Cross Site Request Forgery (CSRF)
Published 2024-01-05 · Modified
8.8EPSS 0.002
CVE-2023-5355
Awesome Support < 6.1.5 - Submitter+ Arbitrary File Deletion
Published 2023-11-06 · Modified
8.1EPSS 0.007
CVE-2015-9318
The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies.
Published 2019-08-20 · Modified
7.5EPSS 0.014
CVE-2022-3511
Awesome Support < 6.1.2 - Subscriber+ Arbitrary Exported Tickets Download
Published 2022-11-28 · Modified
6.5EPSS 0.007
CVE-2023-49857
WordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability
Published 2024-12-09 · Modified
6.5EPSS 0.005
CVE-2015-9317
The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages.
Published 2019-08-20 · Modified
6.1EPSS 0.009
CVE-2021-36919
WordPress Awesome Support plugin <= 6.0.6 - Multiple Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilities
Published 2021-11-26 · Modified
6.1EPSS 0.006
CVE-2023-5354
Awesome Support < 6.1.5 - Reflected Cross-Site Scripting
Published 2023-11-06 · Modified
6.1EPSS 0.004
CVE-2022-38073
WordPress Awesome Support plugin <= 6.0.7 - Multiple Authenticated Persistent XSS (Additional Interested Parties)
Published 2022-09-21 · Modified
5.4EPSS 0.006
CVE-2023-48324
WordPress Awesome Support HelpDesk plugin <= 6.1.4 - Broken Access control vulnerability
Published 2024-12-09 · Modified
5.4EPSS 0.005
CVE-2023-49757
WordPress Awesome Support plugin <= 6.1.10 - Broken Access Control + CSRF vulnerability
Published 2024-12-09 · Modified
5.4EPSS 0.005
CVE-2024-24716
WordPress Awesome Support plugin <= 6.1.6 - Broken Access Control vulnerability
Published 2024-06-09 · Modified
5.4EPSS 0.003
CVE-2024-0596
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via editor_html()
Published 2024-02-10 · Modified
5.3EPSS 0.004
CVE-2019-20181
The awesome-support plugin 5.8.0 for WordPress allows XSS via the post_title parameter.
Published 2020-01-09 · Modified
4.8EPSS 0.007
CVE-2024-0595
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via wpas_get_users()
Published 2024-02-10 · Modified
4.3EPSS 0.004
CVE-2023-5352
Awesome Support < 6.1.5 - Insufficient permission check in wpas_edit_reply
Published 2023-11-06 · Modified
4.3EPSS 0.004