Awesome Support (Unknown) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-11-06. Vendor: Unknown.

CVEs of Awesome Support

• CVE-2023-5355 - CVSS 8.1 (high), 2023-11-06: The Awesome Support WordPress plugin before 6.1.5 does not sanitize file paths when deleting temporary attachment files, allowing a ticket submitter to delete…
• CVE-2023-5354 - CVSS 6.1 (medium), 2023-11-06: The Awesome Support WordPress plugin before 6.1.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected…
• CVE-2023-5352 - CVSS 4.3 (medium), 2023-11-06: The Awesome Support WordPress plugin before 6.1.5 does not correctly authorize the wpas_edit_reply function, allowing users to edit posts for which they do…
• CVE-2022-3511 - CVSS 6.5 (medium), 2022-11-28: The Awesome Support WordPress plugin before 6.1.2 does not ensure that the exported tickets archive to be downloaded belongs to the user making the request,…