Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
GetawesomesupportAwesome Support*

20 matches found

CVE
CVE•added 2020/01/09 10:15 p.m.•110 views

CVE-2019-20181

The awesome-support plugin 5.8.0 for WordPress allows XSS via the post_title parameter.

4.8CVSS4.9AI score0.00254EPSS
CVE
CVE•added 2024/01/05 10:15 a.m.•81 views

CVE-2023-51538

Cross-Site Request Forgery (CSRF) vulnerability in Awesome Support Team Awesome Support – WordPress HelpDesk & Support Plugin.This issue affects Awesome Support – WordPress HelpDesk & Support Plugin: from n/a through 6.1.5.

8.8CVSS8.6AI score0.0006EPSS
CVE
CVE•added 2024/12/09 1:15 p.m.•80 views

CVE-2023-48324

Missing Authorization vulnerability in Awesome Support Team Awesome Support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Awesome Support: from n/a through 6.1.4.

5.4CVSS5.6AI score0.00123EPSS
CVE
CVE•added 2024/12/09 1:15 p.m.•75 views

CVE-2023-49757

Missing Authorization vulnerability in Awesome Support Team Awesome Support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Awesome Support: from n/a through 6.1.10.

5.4CVSS5.6AI score0.00111EPSS
CVE
CVE•added 2024/02/10 7:15 a.m.•74 views

CVE-2024-0596

The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the editor_html() function in all versions up to, and including, 6.1.7. This makes it possible for authenticated attackers, with subscribe...

5.3CVSS6AI score0.00142EPSS
CVE
CVE•added 2023/11/30 1:15 p.m.•72 views

CVE-2023-48323

Cross-Site Request Forgery (CSRF) vulnerability in Awesome Support Team Awesome Support – WordPress HelpDesk & Support Plugin allows Cross Site Request Forgery.This issue affects Awesome Support – WordPress HelpDesk & Support Plugin: from n/a through 6.1.4.

8.8CVSS6.4AI score0.00171EPSS
CVE
CVE•added 2024/12/09 1:15 p.m.•68 views

CVE-2023-49857

Missing Authorization vulnerability in Awesome Support Team Awesome Support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Awesome Support: from n/a through 6.1.7.

6.5CVSS6.5AI score0.00136EPSS
CVE
CVE•added 2022/09/21 8:15 p.m.•67 views

CVE-2022-38073

Multiple Authenticated (custom specific plugin role) Persistent Cross-Site Scripting (XSS) vulnerability in Awesome Support plugin

5.4CVSS5.2AI score0.00166EPSS
CVE
CVE•added 2024/02/10 7:15 a.m.•66 views

CVE-2024-0595

The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpas_get_users() function hooked via AJAX in all versions up to, and including, 6.1.7. This makes it possible for authenticated attackers, wit...

4.3CVSS5.2AI score0.00112EPSS
CVE
CVE•added 2024/02/10 7:15 a.m.•62 views

CVE-2024-0594

The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to union-based SQL Injection via the 'q' parameter of the wpas_get_users action in all versions up to, and including, 6.1.7 due to insufficient escaping on the user supplied parameter and lack of sufficient...

8.8CVSS9AI score0.00323EPSS
CVE
CVE•added 2024/06/09 11:15 a.m.•56 views

CVE-2024-24716

Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.6.

5.4CVSS5.5AI score0.00081EPSS
CVE
CVE•added 2024/06/09 9:15 a.m.•54 views

CVE-2024-30539

Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.7.

9.8CVSS5.7AI score0.00348EPSS
CVE
CVE•added 2023/11/06 9:15 p.m.•52 views

CVE-2023-5352

The Awesome Support WordPress plugin before 6.1.5 does not correctly authorize the wpas_edit_reply function, allowing users to edit posts for which they do not have permission.

4.3CVSS4.5AI score0.00054EPSS
Web
CVE
CVE•added 2022/11/28 2:15 p.m.•51 views

CVE-2022-3511

The Awesome Support WordPress plugin before 6.1.2 does not ensure that the exported tickets archive to be downloaded belongs to the user making the request, allowing a low privileged user, such as subscriber to download arbitrary exported tickets via an IDOR vector

6.5CVSS6.4AI score0.00345EPSS
CVE
CVE•added 2023/11/06 9:15 p.m.•49 views

CVE-2023-5355

The Awesome Support WordPress plugin before 6.1.5 does not sanitize file paths when deleting temporary attachment files, allowing a ticket submitter to delete arbitrary files on the server.

8.1CVSS8.1AI score0.00209EPSS
CVE
CVE•added 2023/11/06 9:15 p.m.•46 views

CVE-2023-5354

The Awesome Support WordPress plugin before 6.1.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

6.1CVSS6AI score0.00117EPSS
Web
CVE
CVE•added 2024/06/10 8:15 a.m.•42 views

CVE-2024-35741

Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.7.

8.8CVSS5.7AI score0.00087EPSS
CVE
CVE•added 2019/08/20 3:15 p.m.•35 views

CVE-2015-9317

The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages.

6.1CVSS6AI score0.0019EPSS
CVE
CVE•added 2019/08/20 3:15 p.m.•32 views

CVE-2015-9318

The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies.

7.5CVSS7.6AI score0.00254EPSS
CVE
CVE•added 2021/11/26 5:15 p.m.•32 views

CVE-2021-36919

Multiple Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilities in WordPress Awesome Support plugin (versions

6.1CVSS5.7AI score0.00162EPSS