AS
Product
Awesome Support – WordPress HelpDesk & Support Plugin
4
CVEs
0
On KEV
6.4
Max CVSS
2
New 30D
Severity mix
Critical 0High 0Medium 4Low 0
Watch
Add Awesome Support – WordPress HelpDesk & Support Plugin to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-103370 New | 6.4 | Oct 28 | Awesome Support <= 6.4.1 - Authenticated (Custom+) Stored Cross-Site Scripting via Ticket Attachment MIME Confusion Affected: through 6.4.1 |
| CVE-2026-96268 | 6.4 | Oct 1 | Awesome Support <= 6.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'gdpr-data' Parameter via wpas_gdpr_user_opt_out AJAX Action Affected: through 6.4.0 |
| CVE-2026-4654 | 5.3 | Apr 8 | Awesome Support <= 6.3.7 - Authenticated (Subscriber+) Insecure Direct Object Reference to Unauthorized Ticket Reply Access via 'ticket_id' Parameter Affected: through 6.3.7 |
| CVE-2026-19946 | 4.3 | Sep 9 | Awesome Support <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial via 'user_id' Parameter Affected: through 6.3.9 |
Showing 4