Lucene search
K

202 matches found

CNNVD
CNNVD
added 2024/02/10 12:0 a.m.2 views

WordPress Plugin Awesome Support Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plug-in. A security vulnerability exists in WordPre...

5.3CVSS6.5AI score0.00142EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/02/10 12:0 a.m.1 views

WordPress Plugin Awesome Support SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS7.7AI score0.00247EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/02/10 12:0 a.m.1 views

WordPress Plugin Awesome Support Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS6.7AI score0.00112EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/02/10 12:0 a.m.1 views

PT-2024-15675 · WordPress · The Awesome Support – Wordpress Helpdesk & Support Plugin

Name of the Vulnerable Software and Affected Versions: The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress versions up to, and including, 6.1.7 Description: The issue is related to a union-based SQL Injection vulnerability via the q parameter of the wpas get users actio...

8.8CVSS8.9AI score0.00247EPSS
Exploits0References9
OSV
OSV
added 2024/01/05 10:15 a.m.1 views

CVE-2023-51538

Cross-Site Request Forgery CSRF vulnerability in Awesome Support Team Awesome Support – WordPress HelpDesk & Support Plugin.This issue affects Awesome Support – WordPress HelpDesk & Support Plugin: from n/a through 6.1.5...

8.8CVSS7.3AI score
Exploits0References1
Prion
Prion
added 2024/01/05 10:15 a.m.15 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Awesome Support Team Awesome Support – WordPress HelpDesk & Support Plugin.This issue affects Awesome Support – WordPress HelpDesk & Support Plugin: from n/a through 6.1.5...

6.8CVSS7.2AI score0.00078EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/05 9:47 a.m.13 views

CVE-2023-51538 WordPress Awesome Support Plugin <= 6.1.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Awesome Support Team Awesome Support – WordPress HelpDesk & Support Plugin.This issue affects Awesome Support – WordPress HelpDesk & Support Plugin: from n/a through 6.1.5...

4.3CVSS8.9AI score0.00078EPSS
Exploits0References1
CVE
CVE
added 2024/01/05 9:47 a.m.84 views

CVE-2023-51538

CVE-2023-51538 describes a Cross-Site Request Forgery (CSRF) in the WordPress plugin Awesome Support – WordPress HelpDesk & Support Plugin for versions up to 6.1.5. The connected Red Hat advisory and ENISA entries also reference this CVE/issue as CSRF affecting that plugin. The available document...

8.8CVSS8.5AI score0.00078EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/05 9:47 a.m.5 views

CVE-2023-51538 WordPress Awesome Support Plugin <= 6.1.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Awesome Support Team Awesome Support – WordPress HelpDesk & Support Plugin.This issue affects Awesome Support – WordPress HelpDesk & Support Plugin: from n/a through 6.1.5...

4.3CVSS8.7AI score0.00078EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/01/05 12:0 a.m.1 views

WordPress Plugin Awesome Support Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS6.5AI score0.00078EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/01/05 12:0 a.m.2 views

PT-2024-14191 · WordPress · Awesome Support

Name of the Vulnerable Software and Affected Versions: Awesome Support – WordPress HelpDesk & Support Plugin versions through 6.1.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability in the Awesome Support Team Awesome Support – WordPress HelpDesk & Support Plugin. This typ...

8.8CVSS8.7AI score0.00078EPSS
Exploits0References5
WPVulnDB
WPVulnDB
added 2023/12/09 12:0 a.m.15 views

Awesome Support < 6.1.11 - Missing Authorization

Description The plugin is vulnerable to unauthorized access due to a missing capability check on an unknown function, allowing authenticated attackers, with subscriber-level access and above, to perform an unauthorized action...

9.2AI score0.00138EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2023/12/07 12:0 a.m.8 views

WordPress Awesome Support Plugin <= 6.1.7 is vulnerable to Broken Access Control

Software Awesome Support Type Plugin Vulnerable versions = 6.1.7 Fixed in 6.1.8 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-49857 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID 75c871c2eac0 Credits thiennv Required privilege...

6.5AI score0.00127EPSS
Exploits0References2Affected Software1
Patchstack
Patchstack
added 2023/12/04 12:0 a.m.6 views

WordPress Awesome Support Plugin <= 6.1.10 is vulnerable to Broken Access Control

Software Awesome Support Type Plugin Vulnerable versions = 6.1.10 Fixed in 6.1.11 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-49757 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID 3019bd4f8cbf Credits Abdi Pranata Required...

6.5AI score0.00138EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2023/11/30 1:15 p.m.6 views

CVE-2023-48323

Cross-Site Request Forgery CSRF vulnerability in Awesome Support Team Awesome Support – WordPress HelpDesk & Support Plugin allows Cross Site Request Forgery.This issue affects Awesome Support – WordPress HelpDesk & Support Plugin: from n/a through 6.1.4...

8.8CVSS0.00171EPSS
Exploits0References1
OSV
OSV
added 2023/11/30 1:15 p.m.0 views

CVE-2023-48323

Cross-Site Request Forgery CSRF vulnerability in Awesome Support Team Awesome Support – WordPress HelpDesk & Support Plugin allows Cross Site Request Forgery.This issue affects Awesome Support – WordPress HelpDesk & Support Plugin: from n/a through 6.1.4...

8.8CVSS7.3AI score
Exploits0References1
Prion
Prion
added 2023/11/30 1:15 p.m.10 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Awesome Support Team Awesome Support – WordPress HelpDesk & Support Plugin allows Cross Site Request Forgery.This issue affects Awesome Support – WordPress HelpDesk & Support Plugin: from n/a through 6.1.4...

6.8CVSS7.1AI score0.00171EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/30 12:59 p.m.17 views

CVE-2023-48323 WordPress Awesome Support Plugin <= 6.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Awesome Support Team Awesome Support – WordPress HelpDesk & Support Plugin allows Cross Site Request Forgery.This issue affects Awesome Support – WordPress HelpDesk & Support Plugin: from n/a through 6.1.4...

4.3CVSS8.9AI score0.00171EPSS
Exploits0References1
CVE
CVE
added 2023/11/30 12:59 p.m.75 views

CVE-2023-48323

CVE-2023-48323: CSRF in Awesome Support for WordPress (plugin: Awesome Support – WordPress HelpDesk & Support Plugin) affects versions 6.1.4 (6.1.5). The CVE’s CVSS from NVD is 8.8 in one metric, but NVD’s entry here (and related Red Hat/EU ENISA summaries) align with a lower overall assessment; ...

8.8CVSS8.5AI score0.00171EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/11/30 12:0 a.m.1 views

WordPress Plugin Awesome Support Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS6.5AI score0.00171EPSS
Exploits0References1
Rows per page
Query Builder