CVE-2024-0595 Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via wpas_get_users()

The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpasgetusers function hooked via AJAX in all versions up to, and including, 6.1.7. This makes it possible for authenticated attackers, with...

CVE-2024-0595

CVE-2024-0595 concerns the Awesome Support – WordPress HelpDesk & Support Plugin. The issue is an unauthorized access vulnerability caused by a missing capability check in the wpas_get_users() function, triggered via AJAX, affecting all versions up to and including 6.1.7. The impact, as documente...