CVE-2024-35741
📋 TL;DR
This CVE describes a Missing Authorization vulnerability in the Awesome Support WordPress plugin that allows unauthorized users to access restricted functionality. It affects all versions up to 6.1.7, potentially enabling attackers to perform actions they shouldn't have permission for. WordPress sites using vulnerable versions of this plugin are affected.
💻 Affected Systems
- Awesome Support WordPress Plugin
📦 What is this software?
Awesome Support by Getawesomesupport
⚠️ Risk & Real-World Impact
Worst Case
Unauthorized users could access sensitive support ticket data, modify tickets, or perform administrative actions within the support system, potentially leading to data exposure or system compromise.
Likely Case
Attackers could view or modify support tickets they shouldn't have access to, potentially exposing customer information or disrupting support operations.
If Mitigated
With proper access controls and network segmentation, impact would be limited to the support system functionality only.
🎯 Exploit Status
Exploitation requires some level of access to the WordPress site but bypasses authorization checks within the plugin.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: 6.1.8 or later
Vendor Advisory: https://patchstack.com/database/vulnerability/awesome-support/wordpress-awesome-support-plugin-6-1-7-broken-access-control-vulnerability-2?_s_id=cve
Restart Required: No
Instructions:
1. Log into WordPress admin panel
2. Navigate to Plugins → Installed Plugins
3. Find Awesome Support plugin
4. Click 'Update Now' if available
5. If manual update needed, download version 6.1.8+ from WordPress.org
6. Deactivate old plugin, upload new version, activate
🔧 Temporary Workarounds
Disable Plugin
allTemporarily disable the Awesome Support plugin until patched
wp plugin deactivate awesome-support
Restrict Access
allUse web application firewall rules to restrict access to plugin endpoints
🧯 If You Can't Patch
- Implement strict network access controls to limit who can reach the WordPress site
- Enable detailed logging and monitoring for unauthorized access attempts to support system endpoints
🔍 How to Verify
Check if Vulnerable:
Check WordPress admin panel → Plugins → Awesome Support → Version number. If version is 6.1.7 or earlier, you are vulnerable.Check Version:
wp plugin get awesome-support --field=versionVerify Fix Applied:
After updating, verify version shows 6.1.8 or later in WordPress plugins list.📡 Detection & Monitoring
Log Indicators:
- Unauthorized access attempts to /wp-content/plugins/awesome-support/ endpoints
- Unusual user activity in support ticket system from non-support roles
Network Indicators:
- HTTP requests to awesome-support plugin endpoints from unauthorized IPs
SIEM Query:
source="wordpress.log" AND "awesome-support" AND ("unauthorized" OR "permission denied" OR "access control")