Lucene search
+L

1 matches found

Patchstack
Patchstack
added 2026/04/08 8:25 a.m.21 views

WordPress Awesome Support plugin <= 6.3.7 - Authenticated (Subscriber+) Insecure Direct Object Reference to Unauthorized Ticket Reply Access via 'ticket_id' Parameter vulnerability

Authenticated Subscriber+ Insecure Direct Object Reference to Unauthorized Ticket Reply Access via 'ticketid' Parameter vulnerability discovered by Michael Iden Mickhat - Hack The Box in WordPress Plugin Awesome Support versions = 6.3.7...

5.3CVSS5.9AI score0.00327EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder