Medium
CVE-2026-96268
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 30
Reset filters
Medium
CVE-2026-96820
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-19946
Awesome Support <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial via 'user_id' Parameter
Medium
CVE-2026-4654
Awesome Support <= 6.3.7 - Authenticated (Subscriber+) Insecure Direct Object Reference to Unauthorized Ticket Reply Access via 'ticket_id' Parameter
Medium
CVE-2025-12641
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.6 - Missing Authorization to Unauthenticated Role Demotion
High
CVE-2025-58662
Awesome Support <= 6.3.5 - Authenticated (Support Manager+) PHP Object Injection
Medium
CVE-2025-53340
Awesome Support <= 6.3.6 - Information Exposure
High
CVE-2024-13567
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Medium
CVE-2024-54289
Awesome Support <= 6.3.1 - Missing Authorization
Medium
CVE-2024-30539
Awesome Support <= 6.1.7 - Missing Authorization
Medium
CVE-2024-24716
Awesome Support <= 6.1.6 - Insufficient Authorization via wpas_can_delete_attachments()
Medium
CVE-2024-0596
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via editor_html()
Medium
CVE-2024-0595
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via wpas_get_users()
High
CVE-2024-0594
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-51538
Awesome Support <= 6.1.5 - Cross-Site Request Forgery
Medium
CVE-2023-51537
Awesome Support <= 6.1.5 - Missing Authorization via wpas_load_reply_history
Medium
CVE-2023-49857
Awesome Support <= 6.1.7 - Missing Authorization
Medium
CVE-2023-49757
Awesome Support <= 6.1.10 - Missing Authorization
Medium
CVE-2023-48323
Awesome Support <= 6.1.4 - Cross-Site Request Forgery via wpas_edit_reply_ajax()
Medium
CVE-2023-48324
Awesome Support <= 6.1.4 - Missing Authorization via wpas_edit_reply_ajax()
High
CVE-2023-5355
Awesome Support <= 6.1.4 - Authenticated (Submitter+) Arbitrary File Deletion
Medium
CVE-2023-5354
Awesome Support <= 6.1.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-5352
Awesome Support <= 6.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification
Medium
CVE-2022-3511
Awesome Support <= 6.1.1 - Insecure Direct Object Reference to (Subscriber+) Ticket Export
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.