Would love to know when this vulnerability is patched, too
Plugin Author
Jawada
(@jawada)
Hello,
Thank you for reaching out and for sharing the security vulnerability details with us. This is a known issue, and our team is already working on a fix. The patch will be included in the next release.
Best regards,
When will there be a patch for this?!
It’s been since September 22, 2025 when this vulnerability was published.
Security is important, and this is not acceptable for a paid plugin.
This patch should come before your next planned release.
Please fix this issue ASAP.
Cheers,
What’s the timeframe for the patch/next release? I don’t like leaving the site exposed and it’s been a known issue since at least September 22nd:
Input validation vulnerability in Awesome Support – WordPress HelpDesk & Support Plugin 6.3.5
- Severity: high-risk
- Status: Open
- Publication: September 22, 2025
A popular plugin for WordPress called “Awesome Support – WordPress HelpDesk & Support Plugin” has a security issue that allows attackers with certain permissions to inject a harmful code into the site. This can only happen if another plugin or theme with a similar code is also installed on the site. If this happens, the attacker can potentially do things like delete important files, get access to personal information, or even run their own code on the site.Detected in:
Awesome Support – WordPress HelpDesk & Support Plugin open vulnerable versions: >= * <= 6.3.5
https://really-simple-ssl.com/vulnerability/e3a8a5fd-b49c-485e-96f2-a64692b451d7/
Hi All,
I noticed the fix for this was released.
Thanks for updating!
Cheers!
-
This reply was modified 5 months ago by
grayscale.
Plugin Author
Jawada
(@jawada)
Hello everyone,
Thank you for reaching out. The vulnerability issue has been resolved, and a fixed version of the Awesome Support plugin has been released. Please update Awesome Support to the latest version.
If you have any questions, please let us know.
