Description
The Awesome Support WordPress plugin before 6.1.5 does not correctly authorize the wpas_edit_reply function, allowing users to edit posts for which they do not have permission.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Awesome Support | < 6.1.5 | 6.1.5 |
References
- https://wpscan.com/vulnerability/d32b2136-d923-4f36-bd76-af4578deb23b exploit vdb-entry technical-description