Awesome Support vulnerabilities | LiveThreat CVE Feed

Product

Awesome Support

by Getawesomesupport · last CVE Dec 9, 2024

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities20 In the news0 Timeline

Severity mix

Critical 1High 6Medium 13Low 0

Severity

All severities20 Critical1 High6 Medium13 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Awesome Support to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-30539	9.8	0%	Jun 9	WordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability Affected: before 6.1.8
CVE-2024-35741	8.8	0%	Jun 10	WordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability Affected: before 6.1.8
CVE-2024-0594	8.8	1%	Feb 10	Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Authenticated (Subscriber+) SQL Injection Affected: through 6.1.7
CVE-2023-51538	8.8	0%	Jan 5	WordPress Awesome Support Plugin <= 6.1.5 is vulnerable to Cross Site Request Forgery (CSRF) Affected: through 6.1.5
CVE-2023-48323	8.8	0%	Nov 30	WordPress Awesome Support Plugin <= 6.1.4 is vulnerable to Cross Site Request Forgery (CSRF) Affected: through 6.1.4
CVE-2023-5355	8.1	1%	Nov 6	Awesome Support < 6.1.5 - Submitter+ Arbitrary File Deletion Affected: before 6.1.5
CVE-2015-9318	7.5	1%	Aug 20	The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies Affected: before 3.1.7
CVE-2023-49857	6.5	1%	Dec 9	WordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability Affected: before 6.1.8
CVE-2022-3511	6.5	1%	Nov 28	Awesome Support < 6.1.2 - Subscriber+ Arbitrary Exported Tickets Download Affected: before 6.1.2
CVE-2023-5354	6.1	0%	Nov 6	Awesome Support < 6.1.5 - Reflected Cross-Site Scripting Affected: before 6.1.5
CVE-2015-9317	6.1	1%	Aug 20	The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages Affected: before 3.1.7
CVE-2023-48324	5.4	0%	Dec 9	WordPress Awesome Support HelpDesk plugin <= 6.1.4 - Broken Access control vulnerability Affected: before 6.1.5
CVE-2023-49757	5.4	0%	Dec 9	WordPress Awesome Support plugin <= 6.1.10 - Broken Access Control + CSRF vulnerability Affected: before 6.1.11
CVE-2024-24716	5.4	0%	Jun 9	WordPress Awesome Support plugin <= 6.1.6 - Broken Access Control vulnerability Affected: before 6.1.7
CVE-2022-38073	5.4	1%	Sep 21	WordPress Awesome Support plugin <= 6.0.7 - Multiple Authenticated Persistent XSS (Additional Interested Parties) Affected: through 6.0.7
CVE-2021-36919	5.4	1%	Nov 26	WordPress Awesome Support plugin <= 6.0.6 - Multiple Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilities Affected: through 6.0.6
CVE-2024-0596	5.3	0%	Feb 10	Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via editor_html() Affected: before 6.1.8
CVE-2019-20181	4.8	1%	Jan 9	The awesome-support plugin 5.8.0 for WordPress allows XSS via the post_title parameter Affected: through 5.8.0
CVE-2024-0595	4.3	0%	Feb 10	Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via wpas_get_users() Affected: before 6.1.8
CVE-2023-5352	4.3	0%	Nov 6	Awesome Support < 6.1.5 - Insufficient permission check in wpas_edit_reply Affected: before 6.1.5