CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Awesome Support Team Awesome Support – WordPress HelpDesk & Support Plugin allows Cross Site Request Forgery.This issue affects Awesome Support – WordPress HelpDesk & Support Plugin: from n/a through 6.1.4.
Explanation of Vulnerability in Simple Terms
The Awesome Support plugin for WordPress is vulnerable to cross-site request forgery (CSRF) attacks. An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions on the support plugin without the admin's knowledge or consent. The vulnerability affects versions up to 6.1.4 and requires the admin to visit a malicious link.
What an attacker can do
Perform unwanted actions on the support plugin by tricking a logged-in admin into visiting a malicious webpage.
Potential impact on your site
An attacker could modify support settings, create tickets, or change configurations if an admin visits a compromised site.
Conditions required to exploit
Admin must be logged into WordPress and visit a malicious webpage controlled by the attacker.
Key dates
External resources
Related vulnerabilities
