Awesome Support – WordPress HelpDesk & Support Plugin

Güvenlik açıkları

• CVE-2024-30539kimlik doğrulamasız≤ 6.1.7

  WordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability

  Kritik 9.8

• CVE-2023-51538kimlik doğrulamasız · tıklama gerekir≤ 6.1.5

  WordPress Awesome Support Plugin <= 6.1.5 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2023-48323kimlik doğrulamasız · tıklama gerekir≤ 6.1.4

  WordPress Awesome Support Plugin <= 6.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2024-35741giriş gerekir≤ 6.1.7

  WordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability

  Yüksek 8.8

• CVE-2024-0594abone+≤ 6.1.7

  Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Authenticated (Subscriber+) SQL Injection

  Yüksek 8.8

• CVE-2024-13567kimlik doğrulamasız≤ 6.3.1

  Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

  Yüksek 7.5

• CVE-2015-9318kimlik doğrulamasız

  The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies.

  Yüksek 7.5

• CVE-2023-51537kimlik doğrulamasız≤ 6.1.5

  WordPress Awesome Support plugin <= 6.1.5 - Broken Access Control vulnerability

  Yüksek 7.3

• CVE-2025-58662yüksek yetki≤ 6.3.5

  WordPress Awesome Support plugin <= 6.3.5 - Deserialization of untrusted data vulnerability

  Yüksek 7.2

• CVE-2026-96820abone+≤ 6.3.9

  WordPress Awesome Support plugin <= 6.3.9 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2025-12641kimlik doğrulamasız≤ 6.3.6

  Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.6 - Missing Authorization to Unauthenticated Role Demotion

  Orta 6.5

• CVE-2023-49857kimlik doğrulamasız≤ 6.1.7

  WordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability

  Orta 6.5

• CVE-2024-54289giriş gerekir≤ 6.3.1

  WordPress Awesome Support plugin <= 6.3.1 - Broken Access Control vulnerability

  Orta 6.5

• CVE-2026-96268abone+≤ 6.4.0

  Awesome Support <= 6.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'gdpr-data' Parameter via wpas_gdpr_user_opt_out AJAX Action

  Orta 6.4

• CVE-2015-9317kimlik doğrulamasız · tıklama gerekir

  The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages.

  Orta 6.1

• CVE-2021-36919kimlik doğrulamasız · tıklama gerekir≤ 6.0.6

  WordPress Awesome Support plugin <= 6.0.6 - Multiple Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilities

  Orta 5.4

• CVE-2023-49757giriş gerekir≤ 6.1.10

  WordPress Awesome Support plugin <= 6.1.10 - Broken Access Control + CSRF vulnerability

  Orta 5.4

• CVE-2023-48324giriş gerekir≤ 6.1.4

  WordPress Awesome Support HelpDesk plugin <= 6.1.4 - Broken Access control vulnerability

  Orta 5.4

• CVE-2024-24716giriş gerekir≤ 6.1.6

  WordPress Awesome Support plugin <= 6.1.6 - Broken Access Control vulnerability

  Orta 5.4

• CVE-2022-38073giriş gerekir≤ 6.0.7

  WordPress Awesome Support plugin <= 6.0.7 - Multiple Authenticated Persistent XSS (Additional Interested Parties)

  Orta 5.4

• CVE-2025-53340kimlik doğrulamasız≤ 6.3.6

  WordPress Awesome Support plugin <= 6.3.6 - Sensitive Data Exposure vulnerability

  Orta 5.3

• CVE-2026-4654abone+≤ 6.3.7

  Awesome Support <= 6.3.7 - Authenticated (Subscriber+) Insecure Direct Object Reference to Unauthorized Ticket Reply Access via 'ticket_id' Parameter

  Orta 5.3

• CVE-2024-0596abone+≤ 6.1.7

  Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via editor_html()

  Orta 5.3

• CVE-2026-19946abone+≤ 6.3.9

  Awesome Support <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial via 'user_id' Parameter

  Orta 4.3

• CVE-2024-0595abone+≤ 6.1.7

  Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via wpas_get_users()

  Orta 4.3