CVE-2023-5355

PoC —

CVSS 3.1

8.1 high

EPSS

<1%p50

Published

Nov 6, 2023 (Nov 6, 2023)

Modified

Jun 17, 2026

Description

The Awesome Support WordPress plugin before 6.1.5 does not sanitize file paths when deleting temporary attachment files, allowing a ticket submitter to delete arbitrary files on the server.

Vendors: getawesomesupport
Products: awesome support
Ecosystems: WordPress
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.