CVE-2023-49857: 
WordPress vulnerability analysis and mitigation

A Missing Authorization vulnerability was discovered in Awesome Support Team Awesome Support plugin versions through 6.1.7. The vulnerability allows exploiting incorrectly configured access control security levels. The issue was discovered by thiennv and disclosed on December 7, 2023 (Patchstack).

The vulnerability has been assigned CVE-2023-49857 and received a CVSS v3.1 Base Score of 6.5 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L. The vulnerability is classified as CWE-862: Missing Authorization, indicating a lack of proper authorization checks in the plugin's functionality (Patchstack).

The broken access control vulnerability could allow an unauthenticated attacker to execute certain higher privileged actions. The CVSS score indicates potential impacts on integrity and availability, though confidentiality is not affected (Patchstack).

The vulnerability has been fixed in version 6.1.8 of the Awesome Support plugin. Users are advised to update to this version or later immediately. For users unable to update immediately, Patchstack has issued a virtual patch to mitigate this issue by blocking potential attacks (Patchstack).