WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Awesome Support – WordPress HelpDesk & Support Plugin

The most versatile and feature-rich help desk and support plugin for WordPress. Provide awesome support directly from your WordPress site.

26Reported vulnerabilities
8.8Highest CVSS score
6.3.9Latest version
6,000+Active installs

What to do now

Update Awesome Support – WordPress HelpDesk & Support Plugin to 6.3.8 or later. 26 of these have a fixed version available. Updating resolves them.

Plugin last updated: May 26, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days
Affected versionsFixed inPublished
CVE-2023-5355 High 8.1 0.7% Before 6.1.5 6.1.5 November 6, 2023
CVE-2022-3511 Medium 6.5 0.7% Before 6.1.2 6.1.2 November 28, 2022
CVE-2023-5354 Medium 6.1 0.4% Before 6.1.5 6.1.5 November 6, 2023
CVE-2024-0594 High 8.8 0.6% 6.1.7 and earlier 6.1.8 February 10, 2024
CVE-2023-51538 High 8.8 0.2% 6.1.5 and earlier 6.1.6 January 5, 2024
CVE-2023-48323 High 8.8 0.2% 6.1.4 and earlier 6.1.5 November 30, 2023
CVE-2023-5352 Medium 4.3 0.4% Before 6.1.5 6.1.5 November 6, 2023
CVE-2015-9318 High 7.5 1.4% Before 3.1.7 3.1.7 August 20, 2019
CVE-2024-13567 High 7.5 0.6% 0 to 6.3.1 (inclusive) 6.3.2 April 1, 2025
CVE-2025-58662 High 7.5 0.5% 6.3.5 and earlier 6.3.6 September 22, 2025
CVE-2025-12641 Medium 6.5 0.4% 0 to 6.3.6 (inclusive) 6.3.7 January 16, 2026
CVE-2015-9317 Medium 6.1 0.9% Before 3.1.7 3.1.7 August 20, 2019
CVE-2023-49857 Medium 5.3 0.5% 6.1.7 and earlier 6.1.8 December 7, 2023
CVE-2023-49757 Medium 5.4 0.5% 6.1.10 and earlier 6.1.11 December 4, 2023
CVE-2022-38073 Medium 5.4 0.5% 6.0.7 and earlier 6.0.8 September 21, 2022
CVE-2021-36919 Medium 5.4 0.5% 6.0.6 and earlier 6.0.7 November 26, 2021
CVE-2026-4654 Medium 5.3 0.3% 0 to 6.3.7 (inclusive) 6.3.8 April 8, 2026
CVE-2025-53340 Medium 5.3 0.3% 6.3.6 and earlier 6.3.7 August 14, 2025
CVE-2024-30539 Medium 5.3 0.4% 6.1.7 and earlier 6.1.8 March 29, 2024
CVE-2024-0596 Medium 5.3 0.4% Before 6.1.8 6.1.8 February 10, 2024
CVE-2023-51537 Medium 5.3 0.3% 6.1.5 and earlier 6.1.6 December 27, 2023
CVE-2019-20181 Medium 4.8 0.7% 5.8.0 and earlier 6.0.14 January 9, 2020
CVE-2024-54289 Medium 4.3 0.6% 6.3.1 and earlier 6.3.2 December 11, 2024
CVE-2024-24716 Medium 4.3 0.3% 6.1.6 and earlier 6.1.7 March 12, 2024
CVE-2024-0595 Medium 4.3 0.4% Before 6.1.8 6.1.8 February 10, 2024
CVE-2023-48324 Medium 4.3 0.5% 6.1.4 and earlier 6.1.5 November 23, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.