CVE-2023-48324mediumCWE-862

CVE-2023-48324: falha de média gravidade em awesomesupport Awesome Support

WordPress Awesome Support HelpDesk plugin <= 6.1.4 - Broken Access control vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Awesome Support

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.4epss 0.5%
Missing Authorization vulnerability in awesomesupport Awesome Support awesome-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Awesome Support: from n/a through <= 6.1.4.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Produtos afetados
awesomesupport · Awesome Support
CVEs relacionadas — awesomesupport Awesome Support

No mesmo produto, das mais perigosas para as menos.

CVE-2024-54289MEDIUMWordPress Awesome Support plugin <= 6.3.1 - Broken Access Control vulnerabilityEPSS 0.6%CVE-2023-49857MEDIUMWordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2023-49757MEDIUMWordPress Awesome Support plugin <= 6.1.10 - Broken Access Control + CSRF vulnerabilityEPSS 0.5%CVE-2025-58662HIGHWordPress Awesome Support plugin <= 6.3.5 - Deserialization of untrusted data vulnerabilityEPSS 0.5%CVE-2025-53340MEDIUMWordPress Awesome Support plugin <= 6.3.6 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2026-96820HIGHWordPress Awesome Support plugin <= 6.3.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%