CVE-2023-5352

MEDIUM

Awesome Support < 6.1.5 - Unauthorized Post Editing via wpas_edit_reply Function

Title source: llm

Description

The Awesome Support WordPress plugin before 6.1.5 does not correctly authorize the wpas_edit_reply function, allowing users to edit posts for which they do not have permission.

References (1)

Core 1

Core References

Exploit, Third Party Advisory exploit vdb-entry technical-description

https://wpscan.com/vulnerability/d32b2136-d923-4f36-bd76-af4578deb23b

Scores

CVSS v3 4.3

EPSS 0.0040

EPSS Percentile 32.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-683 CWE-863

Status published

Products (1)

getawesomesupport/awesome_support < 6.1.5

Published Nov 06, 2023

Tracked Since Feb 18, 2026