Awesome Support – WordPress HelpDesk & Support Plugin

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

154 searches this plugin appeared in over the last 90 days, 20 listed. 121 left out as unrelated or noise (years, numbers, stray words). 1 of its tags isn't in the top 24 for their own search.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 6 months ago; a band this size takes about a year or more to cross, which places it about 50% of the way through.

1. ★★★★★ Wellington

   1.5y ago

   Muito Bom

   Read on wp.org ↗
2. ★★★★★ lykkemedia

   1.7y ago

   They still havent fixed the security bug from December, as described by Wordfence. The plugin is slowing down WP admin. It has a bug that prevent customer downloads from WooCommerce. This topic was modified 1 year, 5 months ago by lykkemedia. This topic was modified 1 year, 5 months ago by lykkemedia.

   Read on wp.org ↗
3. ★★★★★ kampot888

   1.7y ago

   I highly recommend this plugin Simple and concise setting screen First of all, it is compatible with Locotranslate and allows you to easily and concisely change the original translation in the settings screen.As of 202502, there were still some parts that were not compatible. Plugin name and plugin description part. It looks like the author will respond soon. Fast operation Compared to other support plugins, it is much faster to use.Maybe you feel that the developer’s code is always geared towards speed Value user suggestions Other users have complained about various things, but so far I’m satisfied. Therefore, we recommend that you check it out for yourself. This topic was modified 1 year, 5 months ago by kampot888. This topic was modified 1 year, 5 months ago by kampot888.

   Read on wp.org ↗
4. ★★★★★ Joan

   1.9y ago

   The support for this product is very frustrating. Moreover, asking for a refund is very difficult.

   Read on wp.org ↗
5. ★★★★★ stanislav5web

   2.5y ago

   An excellent plugin with technical support requests for WordPress. The free version has quite a lot of functionality. Thank you very much to the developers! This topic was modified 2 years, 2 months ago by stanislav5web.

   Read on wp.org ↗
6. ★★★★★ kira7

   2.6y ago

   Originally gave a 5-star review but now upon having a serious, unresolved issue, I can no longer recommend the free plugin. The plugin caused a critical error on a main category on our site – and given no support via Awesome Support email nor via WP Forums, I have had to find an another ticketing/helpdesk option. The free version of the plugin literally caused our main product category, to become a “critical error” page instead of showing the range of products in that category. As soon as plugin turned off, category worked as normal. My concern would be this occurring on a larger site than ours (we have only 3 categories so saw this issue easily). If this happened on a larger site you may never notice unless you went through thorough testing into every category and sub-category to check. And we could turn off the plugin, then category worked as normal, turn back on plugin, category kept working, but as soon as you did anything with a ticket, the issue returned to that one specific category in it becoming a “critical error” page. I also disabled every setting under the Settings > Product Management section so as to not have syncing of our product range with the plugin, but that didn’t help either. One other issue with the free version I found was that when a customer put up a post in a helpdesk ticket, upon submitting it and page refresh their comment wasn’t appearing for them to see in the ticket. Again, bit of an issue given they really need to be able to see what they just posted. After logging out and back the comment was seen. I cannot comment on the paid-for version as only tested the free version. Such a shame as the ticketing system itself, the interface, functionality etc was so good – but just not functional for us with the 2 above-mentioned issues. This topic was modified 2 years, 3 months ago by kira7. Reason: change of recommendation

   Read on wp.org ↗
7. ★★★★★ easyprovids

   2.6y ago

   two times i tried the update and it does nothing but either stop the website from loading which was the first time and had to go to my web host to fix. Now today i just tried the new update and then i could not load my media library until i deactivated the plugin. Version 6.1.6 works fine so what happen from this version to your update? I just know this update has been nothing but issues and trying to build a business the last thing you want is a potential customer not to be able to load your website. I hope i can stay using Version 6.1.6 but if it going to stop working because they updated I will find another solution. This plugin should work with any wordpress theme that wordpress offer with ease and if it does not it should be stated. This update been nothing but issues for months so my final conclusion is i went back to Version 6.1.6 which works fine with no issues if for some reason this version stops then it time to look for another support system. I gave you 2 stars only because the version i am using works but from a business view it would be a 1 star rating just because time is money and the new update causing the website not to load can cause a customer to go somewhere else which leads to a loss of revenue. Well Hopefully i can keep this as a support system and change my review but tried the update before and gave it one more go today and same thing. Your better off going back to Version 6.1.6 since no one had issues with it. Well will see how this goes……

   Read on wp.org ↗
8. ★★★★★ ITP TECHNOLOGIE

   3.3y ago

   A disconcerting experience… I bought the plugins only to encounter REST API errors and cron tasks that are blocking my WooCommerce-powered WordPress site… I reached out to the support team, who nonchalantly informed me that these issues would be resolved in an upcoming update… An update that, even after one month, has yet to materialize. In short, I strongly advise you to steer clear of this solution as quickly as possible (the number of updates and the delay would alarm you). Consider alternatives like Fluent Support.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 6.3.9 Fix We fixed a PHP notice when a translation was triggered too early. Admins were not able to delete attachment files. Now users can receive email notification when someone replies through the REST API. For new install, 6.3.9
2. — Version 6.3.8 Fix Fixed export tickets feature. Fixed vulnerable issue of Insecure Direct Object Reference. Tweak We improved the layout : Additional Support Staff. 6.3.8
3. — Version 6.3.7 Fix Fixed vulnerable issue of Unauthenticated Sensitive Information Disclosure. Fixed Missing Authorization to Unauthenticated Role Demotion. Tweak Update default fallback rules for the .htaccess file in the ticket folde 6.3.7
4. — Version 6.3.6 Fix Fixed vulnerability to sensitive data exposure. Fixed vulnerable issue of PHP Object Injection. New Create a Get Help button to reach out to Support (Free and Premium). 6.3.6
5. — Version 6.3.5 Fix Fixed Bug in load more ticket replies interface. Fixed vulnerable issue. New New feature to support custom file type such as “ .k” and “ .dyn”. New feature to set the Maximum Lenght in the subject of ticket on Submit 6.3.5
6. — Version 6.3.4 Tweak We improved the Editor ‘Zoom In, Zoom out’ feature. We improved the tutorial process when user setups the plugin first time. New New feature to export the Reports and statiscs data in csv, graphs and pdf. 6.3.4

All 31 disclosed vulnerabilities are patched in the current version (6.4.2). Sites still on an older version should update.

1. Patched Medium · 6.4 Awesome Support <= 6.4.1 - Authenticated (Custom+) Stored Cross-Site Scripting via Ticket Attachment MIME Confusion ↗
   2026-10-27 CVE-2026-103370 Improper Neutralization of Input During Web Page Generation Affects <= 6.4.1 Patched in 6.4.2
2. Patched Medium · 6.4 Awesome Support <= 6.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'gdpr-data' Parameter via wpas_gdpr_user_opt_out AJAX Action ↗
   2026-09-30 CVE-2026-96268 Improper Neutralization of Input During Web Page Generation Affects <= 6.4.0 Patched in 6.4.1
3. Patched Medium · 6.4 Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting ↗
   2026-09-28 CVE-2026-96820 Improper Neutralization of Input During Web Page Generation Affects <= 6.3.9 Patched in 6.4.0
4. Patched Medium · 4.3 Awesome Support <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial via 'user_id' Parameter ↗
   2026-09-08 CVE-2026-19946 Missing Authorization Affects <= 6.3.9 Patched in 6.4.0
5. Patched Medium · 5.3 Awesome Support <= 6.3.7 - Authenticated (Subscriber+) Insecure Direct Object Reference to Unauthorized Ticket Reply Access via 'ticket_id' Parameter ↗
   2026-04-07 CVE-2026-4654 Authorization Bypass Through User-Controlled Key Affects <= 6.3.7 Patched in 6.3.8
6. Patched Medium · 6.5 Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.6 - Missing Authorization to Unauthenticated Role Demotion ↗
   2026-01-15 CVE-2025-12641 Missing Authorization Affects <= 6.3.6 Patched in 6.3.7
7. Patched High · 7.5 Awesome Support <= 6.3.5 - Authenticated (Support Manager+) PHP Object Injection ↗
   2025-09-22 CVE-2025-58662 Deserialization of Untrusted Data Affects <= 6.3.5 Patched in 6.3.6
8. Patched Medium · 5.3 Awesome Support <= 6.3.6 - Information Exposure ↗
   2025-08-14 CVE-2025-53340 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 6.3.6 Patched in 6.3.7
9. Patched High · 7.5 Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory ↗
   2025-03-31 CVE-2024-13567 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 6.3.1 Patched in 6.3.2
10. Patched Medium · 4.3 Awesome Support <= 6.3.1 - Missing Authorization ↗
    2024-12-11 CVE-2024-54289 Missing Authorization Affects <= 6.3.1 Patched in 6.3.2
11. Patched Medium · 5.3 Awesome Support <= 6.1.7 - Missing Authorization ↗
    2024-03-29 CVE-2024-30539 Missing Authorization Affects <= 6.1.7 Patched in 6.1.8
12. Patched Medium · 4.3 Awesome Support <= 6.1.6 - Insufficient Authorization via wpas_can_delete_attachments() ↗
    2024-03-12 CVE-2024-24716 Incorrect Authorization Affects <= 6.1.6 Patched in 6.1.7
13. Patched High · 8.8 Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Authenticated (Subscriber+) SQL Injection ↗
    2024-02-09 CVE-2024-0594 Improper Neutralization of Special Elements used in an SQL Command Affects <= 6.1.7 Patched in 6.1.8
14. Patched Medium · 4.3 Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via wpas_get_users() ↗
    2024-02-09 CVE-2024-0595 Missing Authorization Affects <= 6.1.7 Patched in 6.1.8
15. Patched Medium · 5.3 Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via editor_html() ↗
    2024-02-09 CVE-2024-0596 Missing Authorization Affects <= 6.1.7 Patched in 6.1.8
16. Patched Medium · 5.3 Awesome Support <= 6.1.5 - Missing Authorization via wpas_load_reply_history ↗
    2023-12-27 CVE-2023-51537 Missing Authorization Affects <= 6.1.5 Patched in 6.1.6
17. Patched Medium · 4.3 Awesome Support <= 6.1.5 - Cross-Site Request Forgery ↗
    2023-12-27 CVE-2023-51538 Cross-Site Request Forgery Affects <= 6.1.5 Patched in 6.1.6
18. Patched Medium · 5.3 Awesome Support <= 6.1.7 - Missing Authorization ↗
    2023-12-07 CVE-2023-49857 Missing Authorization Affects <= 6.1.7 Patched in 6.1.8
19. Patched Medium · 5.4 Awesome Support <= 6.1.10 - Missing Authorization ↗
    2023-12-04 CVE-2023-49757 Missing Authorization Affects <= 6.1.10 Patched in 6.1.11
20. Patched Medium · 4.3 Awesome Support <= 6.1.4 - Missing Authorization via wpas_edit_reply_ajax() ↗
    2023-11-23 CVE-2023-48324 Missing Authorization Affects <= 6.1.4 Patched in 6.1.5
21. Patched Medium · 4.3 Awesome Support <= 6.1.4 - Cross-Site Request Forgery via wpas_edit_reply_ajax() ↗
    2023-11-23 CVE-2023-48323 Cross-Site Request Forgery Affects <= 6.1.4 Patched in 6.1.5
22. Patched Medium · 4.3 Awesome Support <= 6.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification ↗
    2023-10-16 CVE-2023-5352 Missing Authorization Affects <= 6.1.4 Patched in 6.1.5
23. Patched Medium · 6.1 Awesome Support <= 6.1.4 - Reflected Cross-Site Scripting ↗
    2023-10-16 CVE-2023-5354 Improper Neutralization of Input During Web Page Generation Affects <= 6.1.4 Patched in 6.1.5
24. Patched High · 8.1 Awesome Support <= 6.1.4 - Authenticated (Submitter+) Arbitrary File Deletion ↗
    2023-10-16 CVE-2023-5355 Improper Limitation of a Pathname to a Restricted Directory Affects <= 6.1.4 Patched in 6.1.5
25. Patched Medium · 4.3 Awesome Support <= 6.1.1 - Insecure Direct Object Reference to (Subscriber+) Ticket Export ↗
    2022-11-07 CVE-2022-3511 Authorization Bypass Through User-Controlled Key Affects <= 6.1.1 Patched in 6.1.2
26. Patched High · 7.2 Awesome Support <= 6.0.7 - Authenticated Stored Cross-Site Scripting ↗
    2022-09-14 CVE-2022-38073 Improper Neutralization of Input During Web Page Generation Affects <= 6.0.7 Patched in 6.0.8
27. Patched Medium · 6.1 Awesome Support – WordPress HelpDesk & Support Plugin <= 6.0.6 - Reflected Cross-Site Scripting ↗
    2021-11-26 CVE-2021-36919 Improper Neutralization of Input During Web Page Generation Affects <= 6.0.6 Patched in 6.0.7
28. Patched Medium · 6.1 Titan Framework <= (Various Versions) - Reflected Cross-Site Scripting ↗
    2021-08-09 CVE-2021-24435 Improper Neutralization of Input During Web Page Generation Affects <= 6.0.10 Patched in 6.0.11
29. Patched Medium · 4.8 Awesome Support – WordPress HelpDesk & Support Plugin <= 6.0.13 - Cross-Site Scripting via post_title ↗
    2020-01-06 CVE-2019-20181 Improper Neutralization of Input During Web Page Generation Affects <= 6.0.13 Patched in 6.0.14
30. Patched Medium · 6.1 Awesome Support – WordPress HelpDesk & Support Plugin < 3.1.7 - Cross-Site Scripting ↗
    2015-05-15 CVE-2015-9317 Improper Neutralization of Input During Web Page Generation Affects < 3.1.7 Patched in 3.1.7
31. Patched Medium · 6.5 Awesome Support – WordPress HelpDesk & Support Plugin <= 3.1.6 - Arbitrary Shortcode Execution ↗
    2015-05-15 CVE-2015-9318 Improper Control of Generation of Code Affects < 3.1.7 Patched in 3.1.7

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 25 languages, 2 at 90% or more

Plus 1 more locale with partial translations.

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-04-28 7K+ → 6K+ down after 158 days in tier
2. 2025-11-21 8K+ → 7K+ down after 1 days in tier
3. 2025-11-20 7K+ → 8K+ up after 1 days in tier
4. 2025-11-19 8K+ → 7K+ down after 288 days in tier
5. 2025-02-04 9K+ → 8K+ down after 140 days in tier
6. 2024-09-17 10K+ → 9K+ down after 2117 days in tier
7. 2018-12-01 8K+ → 10K+ up after 183 days in tier
8. 2018-06-01 7K+ → 8K+ up after 91 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Awesome Support – WordPress HelpDesk & Support Plugin into a readme, a review or a deck. It updates itself.

Awesome Support – WordPress HelpDesk & Support Plugin: 6K+ active installs, 3.5★ (194 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/awesome-support