CVE-2024-13567: Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.3.1 via the 'awesome-support' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/awesome-support directory which can contain file attachments included in support tickets. The vulnerability was partially patched in version 6.3.1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-13567?
CVE-2024-13567 is classified as a critical vulnerability due to its potential for sensitive information exposure.
How do I fix CVE-2024-13567?
To mitigate CVE-2024-13567, upgrade the Awesome Support – WordPress HelpDesk & Support Plugin to version 6.3.2 or later.
Who is affected by CVE-2024-13567?
All users of the Awesome Support – WordPress HelpDesk & Support Plugin up to and including version 6.3.1 are affected by CVE-2024-13567.
What type of vulnerability is CVE-2024-13567?
CVE-2024-13567 is a Sensitive Information Exposure vulnerability that allows unauthorized access to sensitive data.
Can unauthenticated users exploit CVE-2024-13567?
Yes, unauthenticated attackers can exploit CVE-2024-13567 to extract sensitive information.