Skip to content
PluginCanary

Awesome Support

Awesome Support - WordPress HelpDesk & Support Plugin
by awesomesupport · 6,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 16 Oct 2026, 12 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for Awesome Support
Ownership100
Maintenance100
Security60
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Awesome Support still maintained?
Yes. Last release 16 Oct 2026, 12 releases in the last 24 months. 16 Oct 2026 · wordpress.org
Who owns Awesome Support, and has it changed hands?
No change recorded. Main committer yeisonbp since May 2021. 3 Nov 2026 · SVN log
Was Awesome Support removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Awesome Support safe?
31 known vulnerabilities, all fixed (latest in 6.4.2). Not on the exploited list. 27 Oct 2026 · Wordfence Intelligence
Is the latest Awesome Support update safe to install?
No ownership change before 6.4.2. No one-star spike after it. 16 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
awesomesupport28 Dec 2016 to 7 Dec 2018, 93 commits
melliesou27 Feb 2019 to 27 Feb 2019, 1 commits
elghazal27 Jan 2020 to 30 Sep 2020, 10 commits
yeisonbp11 May 2021 to 16 Oct 2026, 98 commits

4 committers recorded. No ownership change since 2014.

Maintenance

Last release
19 days ago
Releases, 24 months
12
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Awesome Support
Q1 20245
Q2 20242
Q3 20241
Q4 20241
Q1 20252
Q2 20252
Q3 20251
Q4 20251
Q1 20261
Q2 20262
Q3 20262
Q4 20261

Last release 16 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 3.5.

Rating distribution
5 star108
4 star13
3 star3
2 star10
1 star60

Security record

10 vulnerabilities in 24 months (31 on record), all patched (latest fixed in 6.4.2).

Show 31 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
27 Oct 2026Awesome Support <= 6.4.1 - Authenticated (Custom+) Stored Cross-Site Scripting via Ticket Attachment MIME Confusion6.4<= 6.4.16.4.2Patched before disclosure
30 Sep 2026Awesome Support <= 6.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'gdpr-data' Parameter via wpas_gdpr_user_opt_out AJAX Action6.4<= 6.4.06.4.1Patched before disclosure
28 Sep 2026Awesome Support - WordPress HelpDesk & Support Plugin <= 6.3.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4<= 6.3.96.4.0Patched before disclosure
8 Sep 2026Awesome Support <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial via 'user_id' Parameter4.3<= 6.3.96.4.0Patched before disclosure
7 Apr 2026Awesome Support <= 6.3.7 - Authenticated (Subscriber+) Insecure Direct Object Reference to Unauthorized Ticket Reply Access via 'ticket_id' Parameter5.3<= 6.3.76.3.8Patched before disclosure
15 Jan 2026Awesome Support - WordPress HelpDesk & Support Plugin <= 6.3.6 - Missing Authorization to Unauthenticated Role Demotion6.5<= 6.3.66.3.7Patched before disclosure
22 Sep 2025Awesome Support <= 6.3.5 - Authenticated (Support Manager+) PHP Object Injection7.5<= 6.3.56.3.650
14 Aug 2025Awesome Support <= 6.3.6 - Information Exposure5.3<= 6.3.66.3.7148
31 Mar 2025Awesome Support - WordPress HelpDesk & Support Plugin <= 6.3.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory7.5<= 6.3.16.3.2Patched before disclosure
11 Dec 2024Awesome Support <= 6.3.1 - Missing Authorization4.3<= 6.3.16.3.2106
29 Mar 2024Awesome Support <= 6.1.7 - Missing Authorization5.3<= 6.1.76.1.8Patched before disclosure
12 Mar 2024Awesome Support <= 6.1.6 - Insufficient Authorization via wpas_can_delete_attachments()4.3<= 6.1.66.1.7Patched before disclosure
9 Feb 2024Awesome Support - WordPress HelpDesk & Support Plugin <= 6.1.7 - Authenticated (Subscriber+) SQL Injection8.8<= 6.1.76.1.8Patched before disclosure
9 Feb 2024Awesome Support - WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via wpas_get_users()4.3<= 6.1.76.1.8Patched before disclosure
9 Feb 2024Awesome Support - WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via editor_html()5.3<= 6.1.76.1.8Patched before disclosure
27 Dec 2023Awesome Support <= 6.1.5 - Missing Authorization via wpas_load_reply_history5.3<= 6.1.56.1.6Patched before disclosure
27 Dec 2023Awesome Support <= 6.1.5 - Cross-Site Request Forgery4.3<= 6.1.56.1.6Patched before disclosure
7 Dec 2023Awesome Support <= 6.1.7 - Missing Authorization5.3<= 6.1.76.1.863
4 Dec 2023Awesome Support <= 6.1.10 - Missing Authorization5.4<= 6.1.106.1.11107
23 Nov 2023Awesome Support <= 6.1.4 - Missing Authorization via wpas_edit_reply_ajax()4.3<= 6.1.46.1.5Patched before disclosure
23 Nov 2023Awesome Support <= 6.1.4 - Cross-Site Request Forgery via wpas_edit_reply_ajax()4.3<= 6.1.46.1.5Patched before disclosure
16 Oct 2023Awesome Support <= 6.1.4 - Authenticated (Submitter+) Arbitrary File Deletion8.1<= 6.1.46.1.5Patched before disclosure
16 Oct 2023Awesome Support <= 6.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification4.3<= 6.1.46.1.5Patched before disclosure
16 Oct 2023Awesome Support <= 6.1.4 - Reflected Cross-Site Scripting6.1<= 6.1.46.1.5Patched before disclosure
7 Nov 2022Awesome Support <= 6.1.1 - Insecure Direct Object Reference to (Subscriber+) Ticket Export4.3<= 6.1.16.1.2Patched before disclosure

Changelog mentions of security fixes: 6.4.0 (security, vulnerability, XSS); 6.4.1 (security, XSS, authorization, escaping); 6.4.2 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

6,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Awesome Support
4 May 2026165
11 May 2026395
18 May 2026593
25 May 20262,375
1 Jun 2026698
8 Jun 2026543
15 Jun 2026446
22 Jun 2026425
29 Jun 2026430
6 Jul 2026644
13 Jul 2026460
20 Jul 2026434
27 Jul 2026418
3 Aug 2026429
10 Aug 2026386
17 Aug 2026363
24 Aug 2026429
31 Aug 20262,222
7 Sep 20261,006
14 Sep 2026941
21 Sep 2026703
28 Sep 20262,682
5 Oct 20261,025
12 Oct 20262,516
19 Oct 20261,256
26 Oct 20261,292
2 Nov 2026133

Weekly downloads over the last 4 weeks are 50% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version6.4.2
Authorawesomesupport
Added19 Dec 2014
Last updated16 Oct 2026
Active installs6,000+
Requires WordPress5.6
Tested up to7.1.4
Requires PHP7.4
CategorySupport & Help Desk > Help Desk & Ticketing Systems
Tagssupport, tickets, helpdesk, ticket system, Support Ticket

Questions

Is Awesome Support still maintained?

Yes. Last release 16 Oct 2026, 12 releases in the last 24 months.

Who owns Awesome Support, and has it changed hands?

No change recorded. Main committer yeisonbp since May 2021.

Was Awesome Support removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Awesome Support safe?

31 known vulnerabilities, all fixed (latest in 6.4.2). Not on the exploited list.

Is the latest Awesome Support update safe to install?

No ownership change before 6.4.2. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue