Vulnerability history

Authenticated (Custom+) Stored Cross-Site Scripting vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Cross Site Scripting (XSS) vulnerability

Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial vulnerability

Authenticated (Subscriber+) Insecure Direct Object Reference to Unauthorized Ticket Reply Access via 'ticket_id' Parameter vulnerability

WordPress Awesome Support - WordPress HelpDesk & Support Plugin plugin <= 6.1.7 - Missing Authorization via editor_html() vulnerability

WordPress Awesome Support - WordPress HelpDesk & Support Plugin plugin <= 6.3.6 - Missing Authorization to Unauthenticated Role Demotion vulnerability

Deserialization of untrusted data vulnerability

Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Information Exposure Through Unprotected Directory vulnerability

Broken Access Control vulnerability

Broken Access Control vulnerability

Broken Access Control vulnerability

Authenticated (Subscriber+) SQL Injection vulnerability

Broken Access Control vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Broken Access Control vulnerability

Broken Access Control vulnerability

Broken Access Control + CSRF vulnerability

Broken Access control vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Submitter+ Arbitrary File Deletion vulnerability

Reflected Cross-Site Scripting vulnerability

Insufficient permission check in wpas_edit_reply vulnerability

Auth. Arbitrary Exported Tickets Download vulnerability

Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilities

Reflected Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Arbitrary File Deletion Vulnerability

Authenticated Arbitrary File Viewing Vulnerability