CVE-2024-24716
📋 TL;DR
This CVE describes a Missing Authorization vulnerability in the Awesome Support WordPress plugin that allows unauthorized users to access restricted functionality. It affects all versions up to 6.1.6. WordPress sites using vulnerable versions of this plugin are at risk.
💻 Affected Systems
- Awesome Support WordPress Plugin
📦 What is this software?
Awesome Support by Getawesomesupport
⚠️ Risk & Real-World Impact
Worst Case
Unauthorized users could access sensitive support ticket data, modify tickets, or perform administrative actions within the support system, potentially leading to data exposure or system compromise.
Likely Case
Attackers could view or modify support tickets they shouldn't have access to, potentially exposing sensitive customer information or disrupting support operations.
If Mitigated
With proper access controls and authentication mechanisms in place, impact would be limited to authorized users only following their assigned permissions.
🎯 Exploit Status
Exploitation requires some level of access to the WordPress site but bypasses authorization checks within the plugin.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: 6.1.7 or later
Vendor Advisory: https://wordpress.org/plugins/awesome-support/#developers
Restart Required: No
Instructions:
1. Log into WordPress admin panel. 2. Navigate to Plugins > Installed Plugins. 3. Find Awesome Support plugin. 4. Click 'Update Now' if available. 5. Alternatively, download latest version from WordPress repository and manually update.
🔧 Temporary Workarounds
Disable Plugin
allTemporarily disable the Awesome Support plugin until patched
wp plugin deactivate awesome-support
Restrict Access
allUse WordPress roles and capabilities to restrict access to support functionality
🧯 If You Can't Patch
- Implement strict network access controls to limit who can access the WordPress admin interface
- Enable detailed logging and monitoring for unauthorized access attempts to support functionality
🔍 How to Verify
Check if Vulnerable:
Check WordPress admin panel > Plugins > Installed Plugins for Awesome Support versionCheck Version:
wp plugin get awesome-support --field=versionVerify Fix Applied:
Verify Awesome Support plugin version is 6.1.7 or higher in WordPress admin📡 Detection & Monitoring
Log Indicators:
- Unauthorized access attempts to support ticket endpoints
- Unusual user activity in support system from non-support roles
Network Indicators:
- HTTP requests to /wp-admin/admin-ajax.php with support-related actions from unauthorized users
SIEM Query:
source="wordpress.log" AND ("awesome-support" OR "as-ajax") AND (user_role!="administrator" AND user_role!="support_agent")