Awesome Support WordPress Plugin Deserialization Vulnerability Allowing Object Injection

Vulnerability

A deserialization vulnerability allowing object injection has been identified in the Awesome Support WordPress plugin, affecting versions through 6.3.4. This vulnerability arises from the deserialization of untrusted data, which could be exploited to manipulate object handling within the application.

Impact

Exploitation of this vulnerability could lead to object injection, allowing for manipulation of the application's object-oriented features. In some cases, such vulnerabilities can be used to execute arbitrary code or cause a denial-of-service condition.

Added: Sep 22, 2025, 8:35 PM
Updated: Sep 22, 2025, 10:46 PM

Vulnerability Rating

Custom Algorithm
spread
5.2
impact
10.0
exploitability
5.0
remediation
0.0
relevance
0.6
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.