Awesome Support – WordPress HelpDesk & Support Plugin

Vulnerabilities 31Slug awesome-supportLatest version 6.3.8WordPress.org →

Minimum safe version

6.3.8

Update to 6.3.8 or later to address 31 fixable vulnerabilities

Latest available6.3.8 ✓
N/A
2026-04-07< 6.3.8

Awesome Support <= 6.3.7 - Authenticated (Subscriber+) Insecure Direct Object Reference to Unauthorized Ticket Reply Access via 'ticket_id' Parameter

WordfenceCVE
High 7.2
2025-09-22< 6.3.6

Awesome Support <= 6.3.5 - Authenticated (Support Manager+) PHP Object Injection

WordfenceEUVDCVE
Medium 4.3
2024-12-27< 6.1.6

WordPress Awesome Support Plugin <= 6.1.5 is vulnerable to Cross Site Request Forgery (CSRF)

PatchstackCVEWordfenceWPScan
Medium 5.3
2024-12-27< 6.1.6

WordPress Awesome Support Plugin <= 6.1.5 is vulnerable to Broken Access Control

PatchstackCVEWordfenceWPScan
Medium 6.1
2023-11-07< 6.1.5

WordPress Awesome Support Plugin < 6.1.5 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWordfenceWPScan
N/A
2017-10-23< 4.3.2

WordPress Awesome Support plugin <= 4.3.1 - Authenticated Arbitrary File Viewing Vulnerability

Patchstack
N/A
2017-10-23< 4.3.2

WordPress Awesome Support plugin <= 4.3.1 - Authenticated Arbitrary File Deletion Vulnerability

Patchstack
N/A
2021-08-09< 6.0.9

WordPress Awesome Support plugin <= 6.0.8 - Reflected Cross-Site Scripting (XSS) vulnerability

Patchstack