CVE-2024-0595

Summary

CVE-2024-0595 is a vulnerability affecting the Awesome Support – WordPress HelpDesk & Support Plugin. The issue lies in the wpas_get_users() function, which is hooked via AJAX and lacks sufficient capability checks. This flaw allows authenticated attackers with subscriber-level access or higher to gain unauthorized access to user data, specifically emails, in versions up to and including 6.1.7.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.