awesome_support_wordpress_helpdesk_support_plugin vulnerabilities

CVEs whose affected-version data names the awesome_support_wordpress_helpdesk_support_plugin package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-19946Medium· 4.3

2w ago

Awesome Support <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial via 'user_id' Parameter

The Awesome Support plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 6.3.9. This is due to a missing capability check on the wpas_do_mr_deny_user() function, which unlike its counterpart wpas_…

▾ Sunlitawesomesupport · Awesome Support – WordPress HelpDesk & Support PluginEPSS 0.25%via CVEORG