4.3
Moyenne
CVE-2023-5352 The Awesome Support WordPress plugin before 6.1.5 does not correctly authorize the wpas_edit_reply function, allowing…
Description
The Awesome Support WordPress plugin before 6.1.5 does not correctly authorize the wpas_edit_reply function, allowing users to edit posts for which they do not have permission.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Awesome Support 6.1 | premières → < 6.1.5 | 6.1.5 |
Autres CVE de Awesome Support
Les 4 CVE de Awesome Support →
CVE-2023-5355
The Awesome Support WordPress plugin before 6.1.5 does not sanitize file paths when deleting temporary attachment files,…
8.1
Élevée
CVE-2023-5354
The Awesome Support WordPress plugin before 6.1.5 does not sanitise and escape a parameter before outputting it back…
6.1
Moyenne
CVE-2022-3511
The Awesome Support WordPress plugin before 6.1.2 does not ensure that the exported tickets archive to be downloaded…
6.5
Moyenne