Awesome Support – WordPress HelpDesk & Support Plugin Security & Risk Analysis

wordpress.org/plugins/awesome-support

The most versatile and feature-rich help desk and support plugin for WordPress. Provide awesome support directly from your WordPress site.

7K active installs v6.3.7 PHP + WP 4.0+ Updated Jan 9, 2026
helpdesksupportsupport-ticketticket-systemtickets
88
A · Safe
CVEs total24
Unpatched0
Last CVEJan 15, 2026
Safety Verdict

Is Awesome Support – WordPress HelpDesk & Support Plugin Safe to Use in 2026?

Generally Safe

Score 88/100

Awesome Support – WordPress HelpDesk & Support Plugin has a strong security track record. Known vulnerabilities have been patched promptly.

24 known CVEsLast CVE: Jan 15, 2026Updated 2mo ago
Risk Assessment

The "awesome-support" plugin v6.3.7 exhibits a mixed security posture. While it demonstrates good practices in areas like a high percentage of prepared SQL statements and proper output escaping, significant concerns remain. The presence of 38 AJAX handlers with two lacking authentication checks represents a direct attack surface that could be exploited. Furthermore, the taint analysis revealed one high-severity flow with unsanitized paths, indicating a potential vulnerability that needs immediate attention.

The plugin's historical vulnerability record is concerning, with a substantial number of known CVEs, including a significant number of high-severity issues. Although there are currently no unpatched CVEs, the recurring nature of vulnerabilities like deserialization, authorization issues, SQL injection, XSS, and path traversal suggests underlying architectural weaknesses or a consistent oversight in secure coding practices. The last recorded vulnerability being in 2026 also implies a recent history of security flaws.

In conclusion, while the plugin attempts to implement security measures, the identified unprotected entry points and the historical pattern of vulnerabilities necessitate caution. The high number of historical CVEs and the presence of a high-severity taint flow are particularly worrying. Developers should prioritize addressing these specific code-level risks and conduct a thorough security review to prevent future occurrences.

Key Concerns

  • AJAX handlers without auth checks
  • High severity taint flow with unsanitized paths
  • Large number of historical high severity CVEs
  • Vulnerability history includes critical types
  • Dangerous function (unserialize) present
Vulnerabilities
24

Awesome Support – WordPress HelpDesk & Support Plugin Security Vulnerabilities

CVEs by Year

2 CVEs in 2015
2015
1 CVE in 2020
2020
1 CVE in 2021
2021
2 CVEs in 2022
2022
8 CVEs in 2023
2023
6 CVEs in 2024
2024
3 CVEs in 2025
2025
1 CVE in 2026
2026
Patched Has unpatched

Severity Breakdown

High
5
Medium
19

24 total CVEs

CVE-2025-12641medium · 6.5Missing Authorization

Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.6 - Missing Authorization to Unauthenticated Role Demotion

Jan 15, 2026 Patched in 6.3.7 (1d)
CVE-2025-58662high · 7.5Deserialization of Untrusted Data

Awesome Support <= 6.3.5 - Authenticated (Support Manager+) PHP Object Injection

Sep 22, 2025 Patched in 6.3.6 (128d)
CVE-2025-53340medium · 5.3Exposure of Sensitive Information to an Unauthorized Actor

Awesome Support <= 6.3.6 - Information Exposure

Aug 14, 2025 Patched in 6.3.7 (153d)
CVE-2024-13567high · 7.5Exposure of Sensitive Information to an Unauthorized Actor

Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

Mar 31, 2025 Patched in 6.3.2 (1d)
CVE-2024-54289medium · 4.3Missing Authorization

Awesome Support <= 6.3.1 - Missing Authorization

Dec 11, 2024 Patched in 6.3.2 (121d)
CVE-2024-30539medium · 5.3Missing Authorization

Awesome Support <= 6.1.7 - Missing Authorization

Mar 29, 2024 Patched in 6.1.8 (6d)
CVE-2024-24716medium · 4.3Incorrect Authorization

Awesome Support <= 6.1.6 - Insufficient Authorization via wpas_can_delete_attachments()

Mar 12, 2024 Patched in 6.1.7 (0d)
CVE-2024-0594high · 8.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Authenticated (Subscriber+) SQL Injection

Feb 9, 2024 Patched in 6.1.8 (172d)
CVE-2024-0595medium · 4.3Missing Authorization

Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via wpas_get_users()

Feb 9, 2024 Patched in 6.1.8 (180d)
CVE-2024-0596medium · 5.3Missing Authorization

Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via editor_html()

Feb 9, 2024 Patched in 6.1.8 (172d)
CVE-2023-51537medium · 5.3Missing Authorization

Awesome Support <= 6.1.5 - Missing Authorization via wpas_load_reply_history

Dec 27, 2023 Patched in 6.1.6 (27d)
CVE-2023-51538medium · 4.3Cross-Site Request Forgery (CSRF)

Awesome Support <= 6.1.5 - Cross-Site Request Forgery

Dec 27, 2023 Patched in 6.1.6 (27d)
CVE-2023-49757medium · 5.4Missing Authorization

Awesome Support <= 6.1.10 - Missing Authorization

Dec 4, 2023 Patched in 6.1.11 (110d)
CVE-2023-48324medium · 4.3Missing Authorization

Awesome Support <= 6.1.4 - Missing Authorization via wpas_edit_reply_ajax()

Nov 23, 2023 Patched in 6.1.5 (61d)
CVE-2023-48323medium · 4.3Cross-Site Request Forgery (CSRF)

Awesome Support <= 6.1.4 - Cross-Site Request Forgery via wpas_edit_reply_ajax()

Nov 23, 2023 Patched in 6.1.5 (61d)
CVE-2023-5352medium · 4.3Missing Authorization

Awesome Support <= 6.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification

Oct 16, 2023 Patched in 6.1.5 (99d)
CVE-2023-5354medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Awesome Support <= 6.1.4 - Reflected Cross-Site Scripting

Oct 16, 2023 Patched in 6.1.5 (99d)
CVE-2023-5355high · 8.1Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Awesome Support <= 6.1.4 - Authenticated (Submitter+) Arbitrary File Deletion

Oct 16, 2023 Patched in 6.1.5 (99d)
CVE-2022-3511medium · 4.3Authorization Bypass Through User-Controlled Key

Awesome Support <= 6.1.1 - Insecure Direct Object Reference to (Subscriber+) Ticket Export

Nov 7, 2022 Patched in 6.1.2 (442d)
CVE-2022-38073high · 7.2Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Awesome Support <= 6.0.7 - Authenticated Stored Cross-Site Scripting

Sep 14, 2022 Patched in 6.0.8 (496d)
CVE-2021-36919medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Awesome Support – WordPress HelpDesk & Support Plugin <= 6.0.6 - Reflected Cross-Site Scripting

Nov 26, 2021 Patched in 6.0.7 (788d)
CVE-2019-20181medium · 4.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Awesome Support – WordPress HelpDesk & Support Plugin <= 6.0.13 - Cross-Site Scripting via post_title

Jan 6, 2020 Patched in 6.0.14 (1478d)
CVE-2015-9317medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Awesome Support – WordPress HelpDesk & Support Plugin < 3.1.7 - Cross-Site Scripting

May 15, 2015 Patched in 3.1.7 (3175d)
CVE-2015-9318medium · 6.5Improper Control of Generation of Code ('Code Injection')

Awesome Support – WordPress HelpDesk & Support Plugin <= 3.1.6 - Arbitrary Shortcode Execution

May 15, 2015 Patched in 3.1.7 (3175d)
Code Analysis
Analyzed Mar 16, 2026

Awesome Support – WordPress HelpDesk & Support Plugin Code Analysis

Dangerous Functions
6
Raw SQL Queries
16
28 prepared
Unescaped Output
199
1322 escaped
Nonce Checks
38
Capability Checks
100
File Operations
10
External Requests
12
Bundled Libraries
2

Dangerous Functions Found

unserialize$options = @unserialize( $raw_options, ['allowed_classes' => false] );includes\admin\class-as-admin-setup-wizard.php:402
unserialize$options = @unserialize( $raw_options, ['allowed_classes' => false] );includes\admin\class-as-admin-setup-wizard.php:531
unserialize$value = @unserialize( $raw_value, ['allowed_classes' => false] );includes\admin\functions-tools.php:386
unserialize$decoded = @unserialize( $raw_meta, ['allowed_classes' => false] );includes\class-member-query.php:255
unserialize$imports = @unserialize( $body, ['allowed_classes' => false] );includes\gas-framework\inc\scssphp\scss.inc.php:3675
unserialize$options = @unserialize( $raw_options, ['allowed_classes' => false] );includes\install.php:263

Bundled Libraries

Select2TinyMCE

SQL Query Safety

64% prepared44 total queries

Output Escaping

87% escaped1521 total outputs
Data Flows
5 unsanitized

Data Flow Analysis

18 flows5 with unsanitized paths
custom_filters (includes\admin\class-admin-tickets-list.php:1206)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
2 unprotected

Awesome Support – WordPress HelpDesk & Support Plugin Attack Surface

Entry Points40
Unprotected2

AJAX Handlers 38

authwp_ajax_wpas_dismiss_free_addon_pageincludes\admin\functions-ajax.php:15
authwp_ajax_wpas_skip_wizard_setupincludes\admin\functions-ajax.php:30
authwp_ajax_wpas_get_ticket_for_printincludes\admin\functions-ajax.php:46
authwp_ajax_wpas_get_tickets_for_printincludes\admin\functions-ajax.php:95
authwp_ajax_wpas_close_ticket_prevent_client_notificationincludes\admin\functions-ajax.php:149
authwp_ajax_wpas_tools_log_viewer_viewincludes\admin\functions-log-viewer.php:67
authwp_ajax_wpas_tools_log_viewer_downloadincludes\admin\functions-log-viewer.php:97
authwp_ajax_wpas_tools_log_viewer_deleteincludes\admin\functions-log-viewer.php:121
authwp_ajax_rdn_fetch_notificationsincludes\class-remote-notification-client.php:112
authwp_ajax_wp_editor_ajaxincludes\class-wpas-editor-ajax.php:70
noprivwp_ajax_wp_editor_ajaxincludes\class-wpas-editor-ajax.php:71
authwp_ajax_wp_editor_content_ajaxincludes\class-wpas-editor-ajax.php:72
authwp_ajax_wpas_upload_attachmentincludes\file-uploader\class-file-uploader.php:115
authwp_ajax_wpas_delete_temp_attachmentincludes\file-uploader\class-file-uploader.php:116
authwp_ajax_wpas_delete_temp_directoryincludes\file-uploader\class-file-uploader.php:117
authwp_ajax_wpas_auto_delete_attachment_flagincludes\file-uploader\class-file-uploader.php:130
authwp_ajax_wpas_delete_attachmentincludes\file-uploader\class-file-uploader.php:132
authwp_ajax_wpas_ticket_notifications_windowincludes\functions-notification.php:250
authwp_ajax_wpas_mark_reply_readincludes\functions-post.php:934
authwp_ajax_wpas_edit_replyincludes\functions-post.php:957
authwp_ajax_wpas_edit_reply_editorincludes\functions-post.php:1695
authwp_ajax_wpas_load_repliesincludes\functions-post.php:1807
noprivwp_ajax_wpas_load_repliesincludes\functions-post.php:1808
authwp_ajax_wpas_edit_ticket_contentincludes\functions-post.php:1955
noprivwp_ajax_wpas_edit_ticket_contentincludes\functions-post.php:1956
authwp_ajax_wpas_load_reply_historyincludes\functions-post.php:2096
noprivwp_ajax_wpas_load_reply_historyincludes\functions-post.php:2097
noprivwp_ajax_email_validationincludes\functions-user.php:1191
authwp_ajax_wpas_get_usersincludes\functions-user.php:1237
authwp_ajax_wpas_gdpr_open_ticketincludes\gdpr-integration\gdpr-privacy-options.php:27
noprivwp_ajax_wpas_gdpr_open_ticketincludes\gdpr-integration\gdpr-privacy-options.php:28
authwp_ajax_wpas_gdpr_user_opt_inincludes\gdpr-integration\gdpr-privacy-options.php:33
noprivwp_ajax_wpas_gdpr_user_opt_inincludes\gdpr-integration\gdpr-privacy-options.php:34
authwp_ajax_wpas_gdpr_user_opt_outincludes\gdpr-integration\gdpr-privacy-options.php:39
noprivwp_ajax_wpas_gdpr_user_opt_outincludes\gdpr-integration\gdpr-privacy-options.php:40
authwp_ajax_wpas_gdpr_export_dataincludes\gdpr-integration\gdpr-user-profile.php:54
noprivwp_ajax_wpas_gdpr_export_dataincludes\gdpr-integration\gdpr-user-profile.php:55
authwp_ajax_goodbye_formtracking\class-plugin-usage-tracker.php:118

Shortcodes 2

[ticket-submit] includes\shortcodes\shortcode-submit.php:2
[tickets] includes\shortcodes\shortcode-tickets.php:2
WordPress Hooks 400
actionadmin_noticesawesome-support.php:183
actionplugins_loadedawesome-support.php:199
actionplugins_loadedawesome-support.php:200
actionplugins_loadedawesome-support.php:201
actionplugins_loadedawesome-support.php:202
actionplugins_loadedawesome-support.php:203
actionplugins_loadedawesome-support.php:207
actionplugins_loadedawesome-support.php:214
actionplugins_loadedawesome-support.php:215
actionplugins_loadedawesome-support.php:216
actionplugins_loadedawesome-support.php:217
actioninitawesome-support.php:218
actionplugins_loadedawesome-support.php:219
actionadmin_initawesome-support.php:538
actionadmin_initawesome-support.php:539
actionadmin_initawesome-support.php:540
actionadmin_noticesawesome-support.php:550
actionwp_loadedincludes\admin\class-admin-gas.php:24
filteradmin_headincludes\admin\class-admin-help.php:24
filteradmin_headincludes\admin\class-admin-help.php:25
filteradmin_headincludes\admin\class-admin-help.php:26
filteradmin_headincludes\admin\class-admin-help.php:27
filteradmin_headincludes\admin\class-admin-help.php:28
filteradmin_headincludes\admin\class-admin-help.php:30
filterwpas_get_custom_fieldsincludes\admin\class-admin-tickets-list.php:29
actionmanage_ticket_posts_columnsincludes\admin\class-admin-tickets-list.php:34
actionmanage_ticket_posts_columnsincludes\admin\class-admin-tickets-list.php:35
actionmanage_ticket_posts_custom_columnincludes\admin\class-admin-tickets-list.php:36
filtermanage_edit-ticket_sortable_columnsincludes\admin\class-admin-tickets-list.php:37
actionrestrict_manage_postsincludes\admin\class-admin-tickets-list.php:42
filterparse_queryincludes\admin\class-admin-tickets-list.php:43
filterparse_queryincludes\admin\class-admin-tickets-list.php:44
filterposts_clausesincludes\admin\class-admin-tickets-list.php:45
filterposts_whereincludes\admin\class-admin-tickets-list.php:46
actionparse_requestincludes\admin\class-admin-tickets-list.php:47
actionpre_get_postsincludes\admin\class-admin-tickets-list.php:48
actionpre_get_postsincludes\admin\class-admin-tickets-list.php:49
filterposts_resultsincludes\admin\class-admin-tickets-list.php:50
filterposts_resultsincludes\admin\class-admin-tickets-list.php:51
filterwpas_add_custom_fieldsincludes\admin\class-admin-tickets-list.php:53
actionadmin_menuincludes\admin\class-admin-tickets-list.php:55
filterthe_excerptincludes\admin\class-admin-tickets-list.php:56
filterpost_row_actionsincludes\admin\class-admin-tickets-list.php:57
filterpost_classincludes\admin\class-admin-tickets-list.php:58
filtermanage_posts_extra_tablenavincludes\admin\class-admin-tickets-list.php:59
filterposts_searchincludes\admin\class-admin-tickets-list.php:61
filterposts_joinincludes\admin\class-admin-tickets-list.php:62
filterwpas_admin_tabs_tickets_tablenavincludes\admin\class-admin-tickets-list.php:970
filterwpas_admin_tabs_tickets_tablenav_filter_contentincludes\admin\class-admin-tickets-list.php:1005
filterwpas_admin_tabs_tickets_tablenav_search_contentincludes\admin\class-admin-tickets-list.php:1006
filterwpas_admin_tabs_tickets_tablenav_bulk_actions_contentincludes\admin\class-admin-tickets-list.php:1009
filterwpas_admin_tabs_tickets_tablenav_preferences_contentincludes\admin\class-admin-tickets-list.php:1016
filterwpas_admin_tabs_tickets_tablenav_documentation_contentincludes\admin\class-admin-tickets-list.php:1020
actionedit_user_profileincludes\admin\class-admin-user.php:23
actionshow_user_profileincludes\admin\class-admin-user.php:24
actionpersonal_options_updateincludes\admin\class-admin-user.php:25
actionedit_user_profile_updateincludes\admin\class-admin-user.php:26
actionuser_registerincludes\admin\class-admin-user.php:27
filtermanage_users_columnsincludes\admin\class-admin-user.php:28
filtermanage_users_custom_columnincludes\admin\class-admin-user.php:29
actionwpas_user_profile_fieldsincludes\admin\class-admin-user.php:34
actionwpas_user_profile_fieldsincludes\admin\class-admin-user.php:35
actionwpas_user_profile_fieldsincludes\admin\class-admin-user.php:36
actionwpas_user_profile_fieldsincludes\admin\class-admin-user.php:37
actionwpas_user_profile_fieldsincludes\admin\class-admin-user.php:38
actionwpas_all_user_profile_fieldsincludes\admin\class-admin-user.php:39
actionadmin_menuincludes\admin\class-as-admin-setup-wizard.php:42
actionadmin_initincludes\admin\class-as-admin-setup-wizard.php:43
actionadmin_head-post.phpincludes\admin\functions-admin-actions.php:16
actionwpas_do_admin_close_ticketincludes\admin\functions-admin-actions.php:44
actionwpas_do_admin_open_ticketincludes\admin\functions-admin-actions.php:95
actionwpas_do_admin_trash_replyincludes\admin\functions-admin-actions.php:131
actionwpas_admin_reply_trashedincludes\admin\functions-admin-actions.php:205
filterwpas_toolbar_ticketincludes\admin\functions-admin-ticket-detail-toolbars.php:35
actionadmin_enqueue_scriptsincludes\admin\functions-agent-chat.php:22
actioninitincludes\admin\functions-editor.php:19
filtermce_buttonsincludes\admin\functions-editor.php:28
filtermce_external_pluginsincludes\admin\functions-editor.php:31
filtermce_external_languagesincludes\admin\functions-editor.php:34
actionafter_wp_tiny_mceincludes\admin\functions-editor.php:37
actionpre_get_postsincludes\admin\functions-list-table.php:15
filterpost_row_actionsincludes\admin\functions-list-table.php:128
filterviews_edit-ticketincludes\admin\functions-list-table.php:158
filterbulk_actions-edit-ticketincludes\admin\functions-list-table.php:217
filterpost_row_actionsincludes\admin\functions-list-table.php:235
filterbulk_actions-edit-ticketincludes\admin\functions-list-table.php:257
actionadmin_menuincludes\admin\functions-menu.php:15
actionadmin_menuincludes\admin\functions-menu.php:58
actionadd_meta_boxesincludes\admin\functions-metaboxes.php:15
filterthe_contentincludes\admin\functions-metaboxes.php:96
filterpostbox_classes_ticket_wpas-mb-detailsincludes\admin\functions-misc.php:34
actionadmin_noticesincludes\admin\functions-misc.php:48
filterwpas_toolbar_ticket_replyincludes\admin\functions-misc.php:88
filteradmin_footer_textincludes\admin\functions-misc.php:430
actionadmin_noticesincludes\admin\functions-misc.php:468
actionadmin_noticesincludes\admin\functions-misc.php:514
actionwpas_admin_after_wysiwygincludes\admin\functions-misc.php:632
actionwp_loadedincludes\admin\functions-misc.php:657
actionwp_default_scriptsincludes\admin\functions-misc.php:678
actionwpas_do_dismiss_noticeincludes\admin\functions-notices.php:83
actionadmin_noticesincludes\admin\functions-notices.php:141
filterwp_insert_post_dataincludes\admin\functions-post.php:15
actionsave_post_ticketincludes\admin\functions-post.php:139
actionwpas_add_reply_afterincludes\admin\functions-post.php:370
actionbefore_delete_postincludes\admin\functions-post.php:396
filterredirect_post_locationincludes\admin\functions-post.php:453
filterposts_clausesincludes\admin\functions-post.php:560
actionwpas_backend_ticket_status_before_actionsincludes\admin\functions-post.php:783
actiontrashed_postincludes\admin\functions-post.php:810
actionuntrashed_postincludes\admin\functions-post.php:811
filterwpas_toolbar_ticketincludes\admin\functions-toolbar.php:124
actionadmin_initincludes\admin\functions-tools.php:3
filterallowed_block_types_allincludes\admin\gutenberg\functions-gutenberg-post-type.php:33
filteruse_block_editor_for_post_typeincludes\admin\gutenberg\functions-gutenberg-post-type.php:62
filtergutenberg_can_edit_post_typeincludes\admin\gutenberg\functions-gutenberg-post-type.php:63
actionenqueue_block_editor_assetsincludes\admin\gutenberg\functions-gutenberg.php:15
filterwpas_admin_tabs_after_reply_wysiwygincludes\admin\metaboxes\replies-form.php:16
filterwpas_admin_tabs_after_reply_wysiwyg_reply_form_contentincludes\admin\metaboxes\replies-form.php:17
filterwpas_admin_tabs_ticket_mainincludes\admin\metaboxes\ticket-main-tabs.php:14
filterwpas_admin_tabs_ticket_mainincludes\admin\metaboxes\ticket-main-tabs.php:45
filterwpas_admin_tabs_ticket_main_ticket_contentincludes\admin\metaboxes\ticket-main-tabs.php:61
filterwpas_admin_tabs_ticket_main_custom_fields_contentincludes\admin\metaboxes\ticket-main-tabs.php:90
filterwpas_admin_tabs_ticket_main_ai_parties_contentincludes\admin\metaboxes\ticket-main-tabs.php:110
filterwpas_admin_tabs_ticket_main_statistics_contentincludes\admin\metaboxes\ticket-main-tabs.php:128
filterwpas_admin_tabs_ticket_main_time_tracking_contentincludes\admin\metaboxes\ticket-main-tabs.php:146
filterwpas_cf_field_markupincludes\admin\metaboxes\time-tracking-statistics.php:52
filterwpas_plugin_settingsincludes\admin\settings\settings-advanced.php:2
filterwpas_plugin_settingsincludes\admin\settings\settings-basic-time-tracking.php:2
filterwpas_plugin_settingsincludes\admin\settings\settings-fields.php:2
filterwpas_plugin_settingsincludes\admin\settings\settings-general.php:2
filterwpas_plugin_settingsincludes\admin\settings\settings-integration.php:2
filterwpas_plugin_settingsincludes\admin\settings\settings-language.php:2
filterwpas_plugin_settingsincludes\admin\settings\settings-licenses.php:2
filterwpas_plugin_settingsincludes\admin\settings\settings-moderated-registration.php:2
filterwpas_plugin_settingsincludes\admin\settings\settings-notifications.php:2
filterwpas_plugin_settingsincludes\admin\settings\settings-permissions.php:2
filterwpas_plugin_settingsincludes\admin\settings\settings-privacy.php:2
filterwpas_plugin_settingsincludes\admin\settings\settings-products-management.php:2
filterwpas_plugin_settingsincludes\admin\settings\settings-registration.php:2
filterwpas_plugin_settingsincludes\admin\settings\settings-style.php:2
filterwpas_admin_tabs_wpas_aboutincludes\admin\views\about.php:3
filterwpas_admin_tabs_wpas_about_welcome_contentincludes\admin\views\about.php:5
filterwpas_admin_tabs_wpas_about_change_log_contentincludes\admin\views\about.php:6
filterwpas_admin_tabs_wpas_about_getting_started_contentincludes\admin\views\about.php:7
filterwpas_admin_tabs_wpas_about_videos_contentincludes\admin\views\about.php:8
filterwpas_admin_tabs_wpas_about_docs_contentincludes\admin\views\about.php:9
filterwpas_admin_tabs_wpas_about_credits_contentincludes\admin\views\about.php:10
actionadmin_enqueue_scriptsincludes\admin\views\system-logs.php:40
actionadmin_footerincludes\admin\views\system-logs.php:336
filterwp_mail_content_typeincludes\class-email-notifications.php:72
filterwp_mail_content_typeincludes\class-email-notifications.php:97
actionplugins_loadedincludes\class-extension-base.php:274
actionadmin_noticesincludes\class-extension-base.php:277
actionadmin_initincludes\class-extension-base.php:278
actionadmin_noticesincludes\class-extension-base.php:289
filterwpas_addons_licensesincludes\class-extension-base.php:290
filterplugin_row_metaincludes\class-extension-base.php:291
actionplugins_loadedincludes\class-gist.php:20
filterwpas_plugin_settingsincludes\class-mailgun-email-check.php:4
actionwpas_ticket_assignee_changedincludes\class-member-agent.php:12
filterget_termsincludes\class-product-sync.php:104
filterget_termincludes\class-product-sync.php:105
filterget_the_termsincludes\class-product-sync.php:106
actioninitincludes\class-product-sync.php:107
actionadmin_noticesincludes\class-product-sync.php:108
actionwp_insert_postincludes\class-product-sync.php:110
actiontrashed_postincludes\class-product-sync.php:111
actiondelete_postincludes\class-product-sync.php:112
actionwpas_system_tools_table_afterincludes\class-product-sync.php:114
actionwpas_system_tools_table_afterincludes\class-product-sync.php:115
actionwpas_system_tools_table_afterincludes\class-product-sync.php:116
actioninitincludes\class-remote-notification-client.php:103
actionadmin_print_stylesincludes\class-remote-notification-client.php:107
actionadmin_noticesincludes\class-remote-notification-client.php:108
actionadmin_footerincludes\class-remote-notification-client.php:109
filterheartbeat_receivedincludes\class-remote-notification-client.php:113
filterwp_mail_content_typeincludes\class-user-email-notification.php:71
filterwp_mail_content_typeincludes\class-user-email-notification.php:90
actionplugins_loadedincludes\class-wpas-editor-ajax.php:26
filtertiny_mce_before_initincludes\class-wpas-editor-ajax.php:59
filterquicktags_settingsincludes\class-wpas-editor-ajax.php:60
filterwp_session_cookie_secureincludes\class-wpas-session.php:41
filterwp_session_cookie_httponlyincludes\class-wpas-session.php:42
filterwp_session_delete_batch_sizeincludes\class-wpas-session.php:43
actionwp_print_scriptsincludes\compatibility\acf-pro.php:15
actionadmin_print_scriptsincludes\compatibility\divi.php:23
actionin_admin_footerincludes\compatibility\divi.php:41
actionadmin_enqueue_scriptsincludes\compatibility\sensei.php:15
actioninitincludes\compatibility\sensei.php:46
actionadmin_enqueue_scriptsincludes\compatibility\wc.php:8
actionwpml_loadedincludes\compatibility\wpml.php:15
filterwpas_plugin_frontend_pagesincludes\compatibility\wpml.php:29
actioninitincludes\custom-fields\class-custom-fields.php:30
filterwpas_before_submit_new_ticket_checksincludes\custom-fields\class-custom-fields.php:37
actionwpas_open_ticket_before_assignedincludes\custom-fields\class-custom-fields.php:40
actionwp_enqueue_scriptsincludes\custom-fields\class-custom-fields.php:178
actionwp_enqueue_scriptsincludes\custom-fields\class-custom-fields.php:183
actionadmin_menuincludes\custom-fields\class-custom-fields.php:303
filterwpas_cf_field_classincludes\custom-fields\field-types\class-cf-date-field.php:14
filterwpas_cf_field_attsincludes\custom-fields\field-types\class-cf-select.php:22
filterwpas_cf_field_classincludes\custom-fields\field-types\class-cf-select.php:26
filterwpas_cf_field_classincludes\custom-fields\field-types\class-cf-taxonomy.php:67
filterwpas_cf_field_attsincludes\custom-fields\field-types\class-cf-upload.php:43
actioninitincludes\custom-fields\functions-custom-fields.php:294
actionadmin_initincludes\custom-fields\functions-custom-fields.php:976
filterupload_dirincludes\file-uploader\class-file-uploader.php:50
filterwp_handle_upload_prefilterincludes\file-uploader\class-file-uploader.php:51
filterwp_handle_upload_prefilterincludes\file-uploader\class-file-uploader.php:52
filterupload_mimesincludes\file-uploader\class-file-uploader.php:53
actionpre_get_postsincludes\file-uploader\class-file-uploader.php:54
actioninitincludes\file-uploader\class-file-uploader.php:55
actiontemplate_redirectincludes\file-uploader\class-file-uploader.php:56
actionposts_clausesincludes\file-uploader\class-file-uploader.php:57
actionwpas_submission_form_inside_before_submitincludes\file-uploader\class-file-uploader.php:67
actionwpas_ticket_details_reply_textarea_afterincludes\file-uploader\class-file-uploader.php:68
actionwpas_frontend_ticket_content_afterincludes\file-uploader\class-file-uploader.php:73
actionwpas_frontend_reply_content_afterincludes\file-uploader\class-file-uploader.php:74
actionwpas_process_ticket_attachmentsincludes\file-uploader\class-file-uploader.php:75
actionwpas_add_reply_admin_afterincludes\file-uploader\class-file-uploader.php:79
actionpost_edit_form_tagincludes\file-uploader\class-file-uploader.php:82
filterwpas_admin_tabs_after_reply_wysiwygincludes\file-uploader\class-file-uploader.php:84
filterwpas_admin_tabs_after_reply_wysiwyg_attachments_contentincludes\file-uploader\class-file-uploader.php:85
actionbefore_delete_postincludes\file-uploader\class-file-uploader.php:87
actionwpas_backend_ticket_content_afterincludes\file-uploader\class-file-uploader.php:88
actionwpas_backend_reply_content_afterincludes\file-uploader\class-file-uploader.php:89
actionwpas_backend_reply_content_after_with_imageincludes\file-uploader\class-file-uploader.php:90
filterwpas_cf_wrapper_classincludes\file-uploader\class-file-uploader.php:91
actionattachments_dir_cleanup_actionincludes\file-uploader\class-file-uploader.php:99
actionwpincludes\file-uploader\class-file-uploader.php:102
actionadmin_enqueue_scriptsincludes\file-uploader\class-file-uploader.php:107
actionwp_enqueue_scriptsincludes\file-uploader\class-file-uploader.php:109
actionwpas_open_ticket_afterincludes\file-uploader\class-file-uploader.php:112
actionwpas_add_reply_afterincludes\file-uploader\class-file-uploader.php:113
actionwpas_open_ticket_afterincludes\file-uploader\class-file-uploader.php:122
actionwpas_add_reply_public_afterincludes\file-uploader\class-file-uploader.php:123
actionwpas_submission_form_inside_before_submitincludes\file-uploader\class-file-uploader.php:126
actionwpas_ticket_details_reply_close_checkbox_afterincludes\file-uploader\class-file-uploader.php:127
actionwpas_backend_ticket_status_before_actionsincludes\file-uploader\class-file-uploader.php:128
actionwpas_ticket_after_savedincludes\file-uploader\class-file-uploader.php:134
actionwpas_open_ticket_afterincludes\file-uploader\class-file-uploader.php:135
actionwpas_after_close_ticketincludes\file-uploader\class-file-uploader.php:137
actionadmin_initincludes\file-uploader\class-file-uploader.php:140
filterwpas_redirect_reply_addedincludes\file-uploader\class-file-uploader.php:1440
filterwpas_plugin_settingsincludes\file-uploader\settings-file-upload.php:2
actioninitincludes\functions-actions.php:15
actionplugins_loadedincludes\functions-addons.php:2
actionadmin_bar_menuincludes\functions-admin-bar.php:15
actionwp_headincludes\functions-admin-bar.php:68
actionadmin_headincludes\functions-admin-bar.php:69
actiontf_admin_options_saved_wpasincludes\functions-channels.php:66
actionwpas_open_ticket_afterincludes\functions-email-notifications.php:15
actionwpas_open_ticket_afterincludes\functions-email-notifications.php:32
actionwpas_ticket_after_update_admin_successincludes\functions-email-notifications.php:49
actionwpas_post_new_ticket_adminincludes\functions-email-notifications.php:70
actionwpas_insert_reply_admin_successincludes\functions-email-notifications.php:88
actionwpas_ticket_closed_by_agentincludes\functions-email-notifications.php:106
actionwpas_add_reply_completeincludes\functions-email-notifications.php:126
actionwpas_after_close_ticketincludes\functions-email-notifications.php:147
actionwpas_custom_field_updatedincludes\functions-email-notifications.php:168
actionwpas_before_templateincludes\functions-error.php:97
filterlocaleincludes\functions-general.php:744
actionwpas_after_templateincludes\functions-general.php:1045
filterplugin_localeincludes\functions-general.php:1065
filterwpas_logs_handlesincludes\functions-general.php:1108
filterwp_link_query_argsincludes\functions-general.php:1124
actionwpas_before_templateincludes\functions-notification.php:196
actionwpas_frontend_add_nav_buttonsincludes\functions-notification.php:209
actioninitincludes\functions-post-type.php:12
actionpost_updated_messagesincludes\functions-post-type.php:100
actioninitincludes\functions-post-type.php:159
actioninitincludes\functions-post-type.php:226
actiontemplate_redirectincludes\functions-post-type.php:287
actionwpas_do_submit_new_ticketincludes\functions-post.php:163
actionwpas_do_submit_new_replyincludes\functions-post.php:692
actionwpas_reply_editedincludes\functions-post.php:845
actionpre_user_queryincludes\functions-post.php:1443
actionwpas_do_reopen_ticketincludes\functions-post.php:1659
actionwpas_backend_reply_content_afterincludes\functions-post.php:1906
actionwpas_backend_ticket_content_afterincludes\functions-post.php:1929
actionwpas_open_ticket_before_assignedincludes\functions-post.php:2328
actionwpas_open_ticket_afterincludes\functions-post.php:2336
actionwpas_open_ticket_afterincludes\functions-post.php:2337
actionwpas_add_reply_completeincludes\functions-post.php:2380
actionticket_priority_add_form_fieldsincludes\functions-priority.php:6
actionticket_priority_edit_form_fieldsincludes\functions-priority.php:7
actioncreated_ticket_priorityincludes\functions-priority.php:9
actionedited_ticket_priorityincludes\functions-priority.php:10
actionload-edit-tags.phpincludes\functions-priority.php:12
actionload-terms.phpincludes\functions-priority.php:13
actionwpas_add_reply_afterincludes\functions-reply.php:109
actionwpas_admin_reply_trashedincludes\functions-reply.php:110
filterthe_contentincludes\functions-templating.php:15
filtertemplate_includeincludes\functions-templating.php:1368
actionwpas_after_registration_fieldsincludes\functions-templating.php:1410
actionwpas_after_templateincludes\functions-templating.php:1445
actionwpas_after_registration_fieldsincludes\functions-templating.php:1476
filterwpas_cf_field_markup_readonlyincludes\functions-templating.php:1556
filterthe_titleincludes\functions-templating.php:1684
filterdocument_title_partsincludes\functions-templating.php:1738
actionticket_type_add_form_fieldsincludes\functions-ticket-type.php:6
actionticket_type_edit_form_fieldsincludes\functions-ticket-type.php:7
actioncreated_ticket_typeincludes\functions-ticket-type.php:9
actionedited_ticket_typeincludes\functions-ticket-type.php:10
actionload-edit-tags.phpincludes\functions-ticket-type.php:12
actionload-terms.phpincludes\functions-ticket-type.php:13
actiontf_admin_options_saved_wpasincludes\functions-ticket-type.php:138
actionwpas_do_registerincludes\functions-user.php:2
actionwpas_do_loginincludes\functions-user.php:464
actionuser_registerincludes\functions-user.php:931
actiondelete_userincludes\functions-user.php:932
actionprofile_updateincludes\functions-user.php:933
filterauthenticateincludes\functions-user.php:1133
actionwpas_register_account_afterincludes\functions-user.php:1540
filterwpas__user_email_notifications_case_is_activeincludes\functions-user.php:1581
filterwpas__user_email_notifications_pre_fetch_subjectincludes\functions-user.php:1605
filterwpas__user_email_notifications_pre_fetch_contentincludes\functions-user.php:1623
actionedit_user_profileincludes\functions-user.php:1642
actionshow_user_profileincludes\functions-user.php:1643
actionwpas_do_mr_activate_userincludes\functions-user.php:1673
actionwpas_do_mr_deny_userincludes\functions-user.php:1724
actionadmin_initincludes\functions-user.php:1755
actionadmin_noticesincludes\functions-user.php:1767
actionadmin_noticesincludes\functions-user.php:1769
actionadmin_noticesincludes\functions-user.php:1777
actionwpas_pre_register_accountincludes\functions-user.php:1840
actionwpas_after_registration_fieldsincludes\functions-user.php:1848
actionadmin_noticesincludes\gas-framework\gas-framework-checker.php:51
actiontgmpa_registerincludes\gas-framework\gas-framework-checker.php:52
actionafter_setup_themeincludes\gas-framework\gas-framework-embedder.php:48
actionplugins_loadedincludes\gas-framework\gas-framework.php:89
actionplugins_loadedincludes\gas-framework\gas-framework.php:90
filterplugin_row_metaincludes\gas-framework\gas-framework.php:91
actioninitincludes\gas-framework\gas-framework.php:94
filterpre_set_site_transient_update_pluginsincludes\gas-framework\inc\edd-licensing\EDD_SL_Plugin_Updater.php:70
filterplugins_apiincludes\gas-framework\inc\edd-licensing\EDD_SL_Plugin_Updater.php:71
actionadmin_initincludes\gas-framework\inc\edd-licensing\EDD_SL_Plugin_Updater.php:74
filterpre_set_site_transient_update_pluginsincludes\gas-framework\inc\edd-licensing\EDD_SL_Plugin_Updater.php:186
filtersite_transient_update_themesincludes\gas-framework\inc\edd-licensing\theme-updater-class.php:41
filterdelete_site_transient_update_themesincludes\gas-framework\inc\edd-licensing\theme-updater-class.php:42
actionload-update-core.phpincludes\gas-framework\inc\edd-licensing\theme-updater-class.php:43
actionload-themes.phpincludes\gas-framework\inc\edd-licensing\theme-updater-class.php:44
actionload-themes.phpincludes\gas-framework\inc\edd-licensing\theme-updater-class.php:45
actionadmin_noticesincludes\gas-framework\inc\edd-licensing\theme-updater-class.php:50
filterwpas_frontend_add_nav_buttonsincludes\gdpr-integration\gdpr-privacy-options.php:25
filterwp_footerincludes\gdpr-integration\gdpr-privacy-options.php:26
actionwpas_system_tools_afterincludes\gdpr-integration\gdpr-privacy-options.php:42
filterwpas_show_done_tool_messageincludes\gdpr-integration\gdpr-privacy-options.php:44
filterexecute_additional_toolsincludes\gdpr-integration\gdpr-privacy-options.php:46
filterwp_privacy_personal_data_erasersincludes\gdpr-integration\gdpr-privacy-options.php:48
filterwp_privacy_personal_data_exportersincludes\gdpr-integration\gdpr-privacy-options.php:50
actionwpincludes\gdpr-integration\gdpr-privacy-options.php:53
actionwpas_tickets_cleanup_actionincludes\gdpr-integration\gdpr-privacy-options.php:56
filtercron_schedulesincludes\gdpr-integration\gdpr-privacy-options.php:58
actionshow_user_profileincludes\gdpr-integration\gdpr-user-profile.php:48
actionedit_user_profileincludes\gdpr-integration\gdpr-user-profile.php:49
actioninitincludes\gdpr-integration\gdpr-user-profile.php:57
actionwpmu_new_blogincludes\install.php:47
actionplugins_loadedincludes\integrations\ecommerce.php:159
actioninitincludes\integrations\ecommerce.php:160
filterwpas_taxonomy_locked_msgincludes\integrations\ecommerce.php:161
actionwpas_after_close_ticketincludes\integrations\my-cred\my-cred.php:20
actionwpas_add_reply_afterincludes\integrations\my-cred\my-cred.php:21
actionwpas_open_ticket_afterincludes\integrations\my-cred\my-cred.php:22
actionwpas_post_new_ticket_adminincludes\integrations\my-cred\my-cred.php:23
actioninitincludes\integrations\wc-account.php:38
filterwoocommerce_account_menu_itemsincludes\integrations\wc-account.php:41
actionplugins_loadedincludes\rest-api\awesome-support-api.php:21
actionadmin_noticesincludes\rest-api\awesome-support-api.php:32
actionwpas_api_tickets_update_additional_fields_afterincludes\rest-api\includes\API\Tickets.php:470
actionwpas_api_tickets_update_additional_fields_afterincludes\rest-api\includes\API\Tickets.php:483
actiontransition_post_statusincludes\rest-api\includes\API\Tickets.php:496
actionwpas_api_tickets_update_additional_fields_afterincludes\rest-api\includes\API\Tickets.php:743
actioninitincludes\rest-api\includes\api.php:85
actionrest_api_initincludes\rest-api\includes\api.php:86
actionrest_api_initincludes\rest-api\includes\api.php:87
filterregister_post_type_argsincludes\rest-api\includes\api.php:94
filterregister_taxonomy_argsincludes\rest-api\includes\api.php:95
filterrest_prepare_taxonomyincludes\rest-api\includes\api.php:96
filterrest_pre_dispatchincludes\rest-api\includes\api.php:97
actionshow_user_profileincludes\rest-api\includes\Auth\Init.php:47
actionedit_user_profileincludes\rest-api\includes\Auth\Init.php:48
filterdetermine_current_userincludes\rest-api\includes\Auth\Init.php:49
filterwp_rest_server_classincludes\rest-api\includes\Auth\Init.php:50
filterwpas_plugin_settingsincludes\rest-api\includes\settings-api.php:2
actionwp_enqueue_scriptsincludes\scripts.php:15
actionadmin_enqueue_scriptsincludes\scripts.php:91
actionwp_enqueue_scriptsincludes\scripts.php:250
actionadmin_enqueue_scriptsincludes\scripts.php:305
actionadmin_menutracking\class-example-settings.php:27
actionadmin_inittracking\class-example-settings.php:28
actionadmin_inittracking\class-example-settings.php:29
actionafter_switch_themetracking\class-plugin-usage-tracker.php:75
actionswitch_themetracking\class-plugin-usage-tracker.php:76
filtercron_schedulestracking\class-plugin-usage-tracker.php:103
actionput_do_weekly_actiontracking\class-plugin-usage-tracker.php:105
actionadmin_inittracking\class-plugin-usage-tracker.php:111
actionadmin_noticestracking\class-plugin-usage-tracker.php:112
actionadmin_noticestracking\class-plugin-usage-tracker.php:113
actionadmin_footer-plugins.phptracking\class-plugin-usage-tracker.php:117
actionadmin_inittracking\class-plugin-usage-tracker.php:741

Scheduled Events 3

attachments_dir_cleanup_action
wpas_tickets_cleanup_action
put_do_weekly_action
Maintenance & Trust

Awesome Support – WordPress HelpDesk & Support Plugin Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedJan 9, 2026
PHP min version
Downloads531K

Community Trust

Rating70/100
Number of ratings194
Active installs7K
Developer Profile

Awesome Support – WordPress HelpDesk & Support Plugin Developer Profile

awesomesupport

1 plugin · 7K total installs

71
trust score
Avg Security Score
88/100
Avg Patch Time
461 days
View full developer profile
Detection Fingerprints

How We Detect Awesome Support – WordPress HelpDesk & Support Plugin

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/awesome-support/assets/css/main.css/wp-content/plugins/awesome-support/assets/js/main.js/wp-content/plugins/awesome-support/includes/admin/assets/css/admin.css/wp-content/plugins/awesome-support/includes/admin/assets/js/admin.js
Script Paths
/wp-content/plugins/awesome-support/assets/js/main.js/wp-content/plugins/awesome-support/includes/admin/assets/js/admin.js
Version Parameters
awesome-support/assets/css/main.css?ver=awesome-support/assets/js/main.js?ver=awesome-support/includes/admin/assets/css/admin.css?ver=awesome-support/includes/admin/assets/js/admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
wpas-main-wrapperwpas-ticket-detailwpas-ticket-list-filterwpas-ticket-formwpas-ticket-status
HTML Comments
<!-- Generated by Awesome Support --><!-- Awesome Support Plugin -->
Data Attributes
data-wpas-ticket-iddata-wpas-current-pagedata-wpas-form-id
JS Globals
AwesomeSupport
Shortcode Output
[awesome_support_ticket_list][awesome_support_ticket_form][awesome_support_ticket_view]
FAQ

Frequently Asked Questions about Awesome Support – WordPress HelpDesk & Support Plugin