WordPress awesome-support has 14 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2015-9318 | The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies. | high | 7.5 | <3.1.7 | 3.1.7 |
| CVE-2015-9317 | The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages. | medium | 6.1 | <3.1.7 | 3.1.7 |
| CVE-2022-3511 | The Awesome Support WordPress plugin before 6.1.2 does not ensure that the exported tickets archive to be downloaded belongs to the user mak | medium | 6.5 | <6.1.2 | 6.1.2 |
| CVE-2019-20181 | The awesome-support plugin 5.8.0 for WordPress allows XSS via the post_title parameter. | medium | 4.8 | <=5.8.0 | – |
| CVE-2023-5355 | The Awesome Support WordPress plugin before 6.1.5 does not sanitize file paths when deleting temporary attachment files, allowing a ticket s | high | 8.1 | <6.1.5 | 6.1.5 |
| CVE-2024-0594 | The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to union-based SQL Injection via the 'q' parame | high | 8.8 | <=6.1.7 | – |
| CVE-2022-38073 | Multiple Authenticated (custom specific plugin role) Persistent Cross-Site Scripting (XSS) vulnerability in Awesome Support plugin <= 6.0.7 | medium | 5.4 | <=6.0.7 | – |
| CVE-2021-36919 | Multiple Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilities in WordPress Awesome Support plugin (versions <= 6.0.6), vulnera | medium | 6.1 | <=6.0.6 | – |
| CVE-2024-0595 | The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capabil | medium | 4.3 | <6.1.8 | 6.1.8 |
| CVE-2023-5352 | The Awesome Support WordPress plugin before 6.1.5 does not correctly authorize the wpas_edit_reply function, allowing users to edit posts fo | medium | 4.3 | <6.1.5 | 6.1.5 |
| CVE-2024-0596 | The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing | medium | 5.3 | <6.1.8 | 6.1.8 |
| CVE-2023-5354 | The Awesome Support WordPress plugin before 6.1.5 does not sanitise and escape a parameter before outputting it back in the page, leading to | medium | 6.1 | <6.1.5 | 6.1.5 |
| CVE-2023-48323 | Cross-Site Request Forgery (CSRF) vulnerability in Awesome Support Team Awesome Support – WordPress HelpDesk & Support Plugin allows Cross S | medium | 4.3 | <=6.1.4 | – |
| CVE-2023-51538 | Cross-Site Request Forgery (CSRF) vulnerability in Awesome Support Team Awesome Support – WordPress HelpDesk & Support Plugin.This issue aff | medium | 4.3 | <=6.1.5 | – |
Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden wordpress /var/www/html
Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.
Install docs How findings are ranked