High severity7.5NVD Advisory· Published Apr 1, 2025· Updated Jun 17, 2026

CVE-2024-13567

Description

The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.3.1 via the 'awesome-support' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/awesome-support directory which can contain file attachments included in support tickets. The vulnerability was partially patched in version 6.3.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Awesome Supportinferred
Range: <=6.3.1
Package: https://wordpress.org/plugins/awesome-support
Getawesomesupport/Awesome Supportllm-fuzzy
Range: <=6.3.1

Patches

Vulnerability mechanics

References

plugins.trac.wordpress.org/browser/awesome-support/trunk/includes/file-uploader/class-file-uploader.phpnvd
plugins.trac.wordpress.org/changeset/3250497/nvd
plugins.trac.wordpress.org/changeset/3262629/nvd
www.wordfence.com/threat-intel/vulnerabilities/id/24c54ef5-ad02-4767-bca6-f74c539d3068nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000