Description (CNA)
The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the editor_html() function in all versions up to, and including, 6.1.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to view password protected and draft posts. CVE-2024-35741 is likely a duplicate of this issue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| awesomesupport / Awesome Support – WordPress HelpDesk & Support Plugin | affected 0 through 6.1.7 |
CWE
CWE-862
References
- https://www.wordfence.com/threat-intel/vulnerabilities/id/e4358e2a-b7f6-44b6-a38a-5b27cb15e1cd?source=cve
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3033134%40awesome-support&new=3033134%40awesome-support&sfp_email=&sfph_mail=
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.