Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-13567

The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.3.1 via the 'awesome-support' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/awesome-support directory which can contain file attachments included in support tickets. The vulnerability was partially patched in version 6.3.1.

Published

2025-04-01T06:15:46.900

Last Modified

2025-04-01T20:26:11.547

Status

Awaiting Analysis

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses

Type: Secondary
CWE-200

Affected Vendors & Products

References

https://plugins.trac.wordpress.org/browser/awesome-support/trunk/includes/file-uploader/class-file-uploader.php ([email protected])
https://plugins.trac.wordpress.org/changeset/3250497/ ([email protected])
https://plugins.trac.wordpress.org/changeset/3262629/ ([email protected])
https://www.wordfence.com/threat-intel/vulnerabilities/id/24c54ef5-ad02-4767-bca6-f74c539d3068?source=cve ([email protected])