Lucene search

K
wpvulndbWpvulndbWPVDB-ID:716B3A19-1DF8-40CD-B90C-1A964308C647
HistoryJan 04, 2024 - 12:00 a.m.

Awesome Support < 6.1.6 - Missing Authorization via wpas_load_reply_history

2024-01-0400:00:00
wpscan.com
5
wordpress
plugin
unauthorized access

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Description The Awesome Support plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the wpas_load_reply_history function in versions up to, and including, 6.1.5. This makes it possible for unauthenticated attackers to load reply history.

CPENameOperatorVersion
eq6.1.6

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Related for WPVDB-ID:716B3A19-1DF8-40CD-B90C-1A964308C647