CVE-2026-4654 | awesomesupport Awesome Support Plugin up to 6.3.7 on WordPress wpas_get_ticket_replies_ajax ticket_id authorization

A vulnerability was found in awesomesupport Awesome Support Plugin up to 6.3.7 on WordPress and classified as problematic. Affected by this issue is the function wpas_get_ticket_replies_ajax. Executing a manipulation of the argument ticket_id can lead to authorization bypass.

This vulnerability appears as CVE-2026-4654. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.