Awesome Support – WordPress HelpDesk & Support Plugin

Уязвимости

• CVE-2024-30539без авторизации≤ 6.1.7

  WordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability

  Критич. 9.8

• CVE-2023-51538без авторизации · нужен клик≤ 6.1.5

  WordPress Awesome Support Plugin <= 6.1.5 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2023-48323без авторизации · нужен клик≤ 6.1.4

  WordPress Awesome Support Plugin <= 6.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2024-35741нужен вход≤ 6.1.7

  WordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability

  Высокий 8.8

• CVE-2024-0594подписчик+≤ 6.1.7

  Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Authenticated (Subscriber+) SQL Injection

  Высокий 8.8

• CVE-2024-13567без авторизации≤ 6.3.1

  Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

  Высокий 7.5

• CVE-2015-9318без авторизации

  The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies.

  Высокий 7.5

• CVE-2023-51537без авторизации≤ 6.1.5

  WordPress Awesome Support plugin <= 6.1.5 - Broken Access Control vulnerability

  Высокий 7.3

• CVE-2025-58662высокие права≤ 6.3.5

  WordPress Awesome Support plugin <= 6.3.5 - Deserialization of untrusted data vulnerability

  Высокий 7.2

• CVE-2026-96820подписчик+≤ 6.3.9

  WordPress Awesome Support plugin <= 6.3.9 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2025-12641без авторизации≤ 6.3.6

  Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.6 - Missing Authorization to Unauthenticated Role Demotion

  Средний 6.5

• CVE-2023-49857без авторизации≤ 6.1.7

  WordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability

  Средний 6.5

• CVE-2024-54289нужен вход≤ 6.3.1

  WordPress Awesome Support plugin <= 6.3.1 - Broken Access Control vulnerability

  Средний 6.5

• CVE-2026-96268подписчик+≤ 6.4.0

  Awesome Support <= 6.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'gdpr-data' Parameter via wpas_gdpr_user_opt_out AJAX Action

  Средний 6.4

• CVE-2015-9317без авторизации · нужен клик

  The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages.

  Средний 6.1

• CVE-2021-36919без авторизации · нужен клик≤ 6.0.6

  WordPress Awesome Support plugin <= 6.0.6 - Multiple Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilities

  Средний 5.4

• CVE-2023-49757нужен вход≤ 6.1.10

  WordPress Awesome Support plugin <= 6.1.10 - Broken Access Control + CSRF vulnerability

  Средний 5.4

• CVE-2023-48324нужен вход≤ 6.1.4

  WordPress Awesome Support HelpDesk plugin <= 6.1.4 - Broken Access control vulnerability

  Средний 5.4

• CVE-2024-24716нужен вход≤ 6.1.6

  WordPress Awesome Support plugin <= 6.1.6 - Broken Access Control vulnerability

  Средний 5.4

• CVE-2022-38073нужен вход≤ 6.0.7

  WordPress Awesome Support plugin <= 6.0.7 - Multiple Authenticated Persistent XSS (Additional Interested Parties)

  Средний 5.4

• CVE-2025-53340без авторизации≤ 6.3.6

  WordPress Awesome Support plugin <= 6.3.6 - Sensitive Data Exposure vulnerability

  Средний 5.3

• CVE-2026-4654подписчик+≤ 6.3.7

  Awesome Support <= 6.3.7 - Authenticated (Subscriber+) Insecure Direct Object Reference to Unauthorized Ticket Reply Access via 'ticket_id' Parameter

  Средний 5.3

• CVE-2024-0596подписчик+≤ 6.1.7

  Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via editor_html()

  Средний 5.3

• CVE-2026-19946подписчик+≤ 6.3.9

  Awesome Support <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial via 'user_id' Parameter

  Средний 4.3

• CVE-2024-0595подписчик+≤ 6.1.7

  Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via wpas_get_users()

  Средний 4.3