CVE-2023-5355: 
WordPress vulnerability analysis and mitigation

The Awesome Support WordPress plugin before version 6.1.5 contains a vulnerability identified as CVE-2023-5355. This security flaw was discovered and publicly disclosed on October 16, 2023. The vulnerability affects the file handling functionality within the plugin's ticket submission system (WPScan Advisory).

The vulnerability is classified as a Path Traversal issue (CWE-22) where the plugin fails to properly sanitize file paths when handling temporary attachment file deletions. The vulnerability has received a CVSS v3.1 base score of 8.1 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H, indicating network accessibility with low attack complexity (NVD).

If exploited, this vulnerability allows a ticket submitter to delete arbitrary files on the server, potentially leading to severe system disruption. The attacker could target critical files such as wp-config.php, effectively compromising the WordPress installation (WPScan Advisory).

The vulnerability has been patched in version 6.1.5 of the Awesome Support plugin. Users are strongly advised to update to this version or later to protect their installations. If immediate updating is not possible, administrators should consider disabling the file upload feature or the attachment deletion capability (WPScan Advisory).