Browse CVEs

MEDIUM 6.5 CVE-2023-49857 Missing Authorization vulnerability in awesomesupport Awesome Support awesome-support allows Exploiting Incorrectly Configured Access Control Securit… Awesome Support 6.1.8+ Fix from $1,6002024-12-09 MEDIUM 5.4 CVE-2023-49757 Missing Authorization vulnerability in awesomesupport Awesome Support awesome-support allows Exploiting Incorrectly Configured Access Control Securit… Awesome Support 6.1.11+ Fix from $1,6002024-12-09 MEDIUM 5.4 CVE-2023-48324 Missing Authorization vulnerability in awesomesupport Awesome Support awesome-support allows Exploiting Incorrectly Configured Access Control Securit… Awesome Support 6.1.5+ Fix from $1,6002024-12-09 HIGH 8.8 CVE-2024-35741 Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.7. Awesome Support 6.1.8+ Fix from $1,9502024-06-10 MEDIUM 5.4 CVE-2024-24716 Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.6. Awesome Support 6.1.7+ Fix from $1,6002024-06-09 CRITICAL 9.8 CVE-2024-30539 Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.7. Awesome Support 6.1.8+ Fix from $2,3002024-06-09 MEDIUM 5.3 CVE-2024-0596 The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capabili… Awesome Support 6.1.8+ Fix from $1,6002024-02-10 HIGH 8.8 CVE-2024-0594 The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to union-based SQL Injection via the 'q' parameter of th… Awesome Support after 6.1.7 Fix from $1,9502024-02-10 HIGH 8.8 CVE-2023-51538 Cross-Site Request Forgery (CSRF) vulnerability in Awesome Support Team Awesome Support – WordPress HelpDesk & Support Plugin.This issue affects Awes… Awesome Support after 6.1.5 Fix from $1,9502024-01-05 HIGH 8.8 CVE-2023-48323 Cross-Site Request Forgery (CSRF) vulnerability in Awesome Support Team Awesome Support – WordPress HelpDesk & Support Plugin allows Cross Site Reque… Awesome Support after 6.1.4 Fix from $1,9502023-11-30 HIGH 8.1 CVE-2023-5355 The Awesome Support WordPress plugin before 6.1.5 does not sanitize file paths when deleting temporary attachment files, allowing a ticket submitter … Awesome Support 6.1.5+ Fix from $1,9502023-11-06 MEDIUM 6.1 CVE-2023-5354 The Awesome Support WordPress plugin before 6.1.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflec… Awesome Support 6.1.5+ Fix from $1,6002023-11-06 MEDIUM 6.5 CVE-2022-3511 The Awesome Support WordPress plugin before 6.1.2 does not ensure that the exported tickets archive to be downloaded belongs to the user making the r… Awesome Support 6.1.2+ Fix from $1,6002022-11-28 MEDIUM 5.4 CVE-2022-38073 Multiple Authenticated (custom specific plugin role) Persistent Cross-Site Scripting (XSS) vulnerability in Awesome Support plugin <= 6.0.7 at WordPr… Awesome Support after 6.0.7 Fix from $1,6002022-09-21 MEDIUM 5.4 CVE-2021-36919 Multiple Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilities in WordPress Awesome Support plugin (versions <= 6.0.6), vulnerable param… Awesome Support after 6.0.6 Fix from $1,6002021-11-26 HIGH 7.5 CVE-2015-9318 The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies. Awesome Support 3.1.7+ Fix from $1,9502019-08-20 MEDIUM 6.1 CVE-2015-9317 The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages. Awesome Support 3.1.7+ Fix from $1,6002019-08-20