Vulnerabilities / Awesome Support
Awesome Support vulnerabilities
Advisories WPSec published for Awesome Support – WordPress HelpDesk & Support Plugin. Other sources may list more. Its attack surface: Awesome Support on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-17 | WPSEC-2026-1143 | Awesome Support <= 6.4.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Ticket Attachment MIME Type Confusion | Medium 4.9 | 6.4.2 |
| 2026-10-01 | WPSEC-2026-0050 | Awesome Support <= 6.4.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via wpas_mark_reply_read AJAX Action | Medium 5.4 | 6.4.1 |
License: CC BY 4.0