Awesome Support
awesomesupport
Developer
6.3.7
Latest version
7,000
Installations
No date
Last updated
Vulnerability history
0 present
26 fixed
12 Mitigation rules
- WordPress Awesome Support - WordPress HelpDesk & Support Plugin plugin <= 6.1.7 - Missing Authorization via editor_html() vulnerability<= 6.1.7Feb 3, 2026
- WordPress Awesome Support - WordPress HelpDesk & Support Plugin plugin <= 6.3.6 - Missing Authorization to Unauthenticated Role Demotion vulnerability<= 6.3.6Jan 16, 2026
- Deserialization of untrusted data vulnerability<= 6.3.5Sep 22, 2025
- Sensitive Data Exposure vulnerability<= 6.3.6Aug 14, 2025
- Unauthenticated Sensitive Information Exposure Through Unprotected Directory vulnerability<= 6.3.1Mar 31, 2025
- Broken Access Control vulnerability<= 6.3.1Dec 11, 2024
- Broken Access Control vulnerability<= 6.1.7Jun 6, 2024
- Broken Access Control vulnerability<= 6.1.7Mar 29, 2024
- Authenticated (Subscriber+) SQL Injection vulnerability<= 6.1.7Feb 12, 2024
- Broken Access Control vulnerability<= 6.1.6Jan 31, 2024
- Cross Site Request Forgery (CSRF) vulnerability<= 6.1.5Dec 27, 2023
- Broken Access Control vulnerability<= 6.1.5Dec 27, 2023
- Broken Access Control vulnerability<= 6.1.7Dec 7, 2023
- Broken Access Control + CSRF vulnerability<= 6.1.10Dec 4, 2023
- Broken Access control vulnerability<= 6.1.4Nov 23, 2023
- Cross Site Request Forgery (CSRF) vulnerability<= 6.1.4Nov 23, 2023
- Submitter+ Arbitrary File Deletion vulnerability< 6.1.5Nov 7, 2023
- Reflected Cross-Site Scripting vulnerability< 6.1.5Nov 7, 2023
- Insufficient permission check in wpas_edit_reply vulnerability< 6.1.5Nov 7, 2023
- Auth. Arbitrary Exported Tickets Download vulnerability<= 6.1.1Nov 7, 2022
- Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities<= 6.0.7Sep 14, 2022
- Multiple Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilities<= 6.0.6Nov 26, 2021
- Reflected Cross-Site Scripting (XSS) vulnerability<= 6.0.8Aug 9, 2021
- Stored Cross-Site Scripting (XSS) vulnerability<= 5.8.2Jan 6, 2020
- Authenticated Arbitrary File Deletion Vulnerability<= 4.3.1Oct 23, 2017
- Authenticated Arbitrary File Viewing Vulnerability<= 4.3.1Oct 23, 2017