PT-2026-31110 · WordPress · The Awesome Support – Wordpress Helpdesk & Support Plugin

Michael Iden · Published 2026-04-08 · Updated 2026-04-13 · CVE-2026-4654

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions The Awesome Support – WordPress HelpDesk & Support Plugin versions up to and including 6.3.7

Description The Awesome Support – WordPress HelpDesk & Support Plugin is susceptible to an Insecure Direct Object Reference issue. The wpas get ticket replies ajax() function does not properly validate user permissions when accessing support tickets. This allows authenticated attackers with subscriber-level access or higher to access sensitive information from all support tickets by manipulating the ticket id parameter.

Recommendations For versions up to and including 6.3.7, ensure the wpas get ticket replies ajax() function properly verifies user permissions before granting access to support ticket data.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2026-4654

Affected Products

The Awesome Support – Wordpress Helpdesk & Support Plugin

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-4654 · Security Note
• https://plugins.trac.wordpress.org/browser/awesome-support/tags/6.3.7/includes/functions-post.php#L1851 · Note
• https://twitter.com/CVEnew/status/2043561054727200938 · Twitter Post
• https://t.me/cveNotify/158429 · Telegram Post
• https://wordfence.com/threat-intel/vulnerabilities/id/9f9015fa-b3f0-4312-8acd-02b715e26f33?source=cve · Note
• https://plugins.trac.wordpress.org/browser/awesome-support/trunk/includes/functions-post.php#L1823 · Note
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3497662%40awesome-support&new=3497662%40awesome-support&sfp_email=&sfph_mail= · Note
• https://plugins.trac.wordpress.org/browser/awesome-support/tags/6.3.7/includes/functions-post.php#L1823 · Note
• https://plugins.trac.wordpress.org/browser/awesome-support/trunk/includes/functions-post.php#L1851 · Note