AW
Vendor
awesomesupport
6
CVEs
0
On KEV
3
New 30D
Products
AS6.4
Awesome Support – WordPress HelpDesk & Support Plugin
awesomesupport
4 CVEs0 on KEV2 new
AS7.1
Awesome Support
awesomesupport
1 CVEs0 on KEV1 new
AS7.3
Awesome Support Wordpress Helpdesk & Support
Awesomesupport
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-103370 New | AS Awesome Support – WordPress HelpDesk & Support Plugin awesomesupport | 6.4 | Oct 28 | Awesome Support <= 6.4.1 - Authenticated (Custom+) Stored Cross-Site Scripting via Ticket Attachment MIME Confusion |
| CVE-2026-96268 | AS Awesome Support – WordPress HelpDesk & Support Plugin awesomesupport | 6.4 | Oct 1 | Awesome Support <= 6.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'gdpr-data' Parameter via wpas_gdpr_user_opt_out AJAX Action |
| CVE-2026-96820 | AS Awesome Support awesomesupport | 7.1 | Sep 30 | WordPress Awesome Support plugin <= 6.3.9 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-19946 | AS Awesome Support – WordPress HelpDesk & Support Plugin awesomesupport | 4.3 | Sep 9 | Awesome Support <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial via 'user_id' Parameter |
| CVE-2026-4654 | AS Awesome Support – WordPress HelpDesk & Support Plugin awesomesupport | 5.3 | Apr 8 | Awesome Support <= 6.3.7 - Authenticated (Subscriber+) Insecure Direct Object Reference to Unauthorized Ticket Reply Access via 'ticket_id' Parameter |
| CVE-2023-51537 | AS Awesome Support Wordpress Helpdesk & Support Awesomesupport | 7.3 | Jun 12 | Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.5 |