CVE-2026-4654
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
The Awesome Support plugin for WordPress up to version 6.3.7 contains an Insecure Direct Object Reference vulnerability. The wpas_get_ticket_replies_ajax() function fails to verify if the authenticated user has permission to view the specific ticket, allowing attackers with subscriber-level access or higher to access sensitive information from all tickets.
Risk Assessment
The risk involves unauthorized access to confidential support ticket data, potentially leading to leakage of customer information or internal data.
Recommendation
Update the Awesome Support plugin to a version above 6.3.7 that includes a permission check fix.
Original NVD description (English source)
The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 6.3.7. This is due to the wpas_get_ticket_replies_ajax() function failing to verify whether the authenticated user has permission to view the specific ticket being requested. This makes it possible for authenticated attackers, with subscriber-level access and above, to access sensitive information from all support tickets in the system by manipulating the ticket_id parameter.