Awesome Support – WordPress HelpDesk & Support Plugin

75 Quality Score

Active Installs

17/30

At 6,000 active installs the plugin is modestly adopted, but its popularity score is slightly inflated by the rating-to-install ratio, not raw market share.

Update Freshness

25/25

With a last update of May 2026 the plugin is very actively maintained, which is the strongest signal in its scoring profile.

User Rating

11/15

A 70/100 rating across 194 reviews indicates broadly positive but not outstanding user satisfaction, with a meaningful share of middling or critical feedback.

Support Health

8/15

Only 1 support thread exists with 100% resolution, which is a great ratio but also reflects very low support volume rather than proven support capacity.

WP Compatibility

15/15

Tested with WordPress 7.0 and requiring WordPress 4.0+, the compatibility score is perfect on paper, though the PHP version requirement is unspecified which is a minor concern.

Scores higher than 39% of indexed plugins

About

The most versatile and feature-rich help desk and support plugin for WordPress. Provide awesome support directly from your WordPress site.

Active Installs 6k+

Rating ★★★½ 3.5/5

Last Updated 2026-09-03 5:34pm GMT

Requires WordPress 4.0+

Tested Up To 7.0.4

Security History

28 known vulnerabilities, all patched

5 High 23 Medium

Most recent: September 8, 2026

View details ▸

Awesome Support <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial via 'user_id' Parameter Medium

September 8, 2026 Patched in ["6.4.0"] CVE-2026-19946

Awesome Support <= 6.3.7 - Authenticated (Subscriber+) Insecure Direct Object Reference to Unauthorized Ticket Reply Access via 'ticket_id' Parameter Medium

April 7, 2026 Patched in ["6.3.8"] CVE-2026-4654

Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.6 - Missing Authorization to Unauthenticated Role Demotion Medium

January 15, 2026 Patched in ["6.3.7"] CVE-2025-12641

Awesome Support <= 6.3.5 - Authenticated (Support Manager+) PHP Object Injection High

September 22, 2025 Patched in ["6.3.6"] CVE-2025-58662

Awesome Support <= 6.3.6 - Information Exposure Medium

August 14, 2025 Patched in ["6.3.7"] CVE-2025-53340

Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory High

March 31, 2025 Patched in ["6.3.2"] CVE-2024-13567

Awesome Support <= 6.3.1 - Missing Authorization Medium

December 11, 2024 Patched in ["6.3.2"] CVE-2024-54289

Awesome Support <= 6.1.7 - Missing Authorization Medium

March 29, 2024 Patched in ["6.1.8"] CVE-2024-30539

Awesome Support <= 6.1.6 - Insufficient Authorization via wpas_can_delete_attachments() Medium

March 12, 2024 Patched in ["6.1.7"] CVE-2024-24716

Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Authenticated (Subscriber+) SQL Injection High

February 9, 2024 Patched in ["6.1.8"] CVE-2024-0594

Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via wpas_get_users() Medium

February 9, 2024 Patched in ["6.1.8"] CVE-2024-0595

Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via editor_html() Medium

February 9, 2024 Patched in ["6.1.8"] CVE-2024-0596

Awesome Support <= 6.1.5 - Missing Authorization via wpas_load_reply_history Medium

December 27, 2023 Patched in ["6.1.6"] CVE-2023-51537

Awesome Support <= 6.1.5 - Cross-Site Request Forgery Medium

December 27, 2023 Patched in ["6.1.6"] CVE-2023-51538

Awesome Support <= 6.1.7 - Missing Authorization Medium

December 7, 2023 Patched in ["6.1.8"] CVE-2023-49857

Awesome Support <= 6.1.10 - Missing Authorization Medium

December 4, 2023 Patched in ["6.1.11"] CVE-2023-49757

Awesome Support <= 6.1.4 - Missing Authorization via wpas_edit_reply_ajax() Medium

November 23, 2023 Patched in ["6.1.5"] CVE-2023-48324

Awesome Support <= 6.1.4 - Cross-Site Request Forgery via wpas_edit_reply_ajax() Medium

November 23, 2023 Patched in ["6.1.5"] CVE-2023-48323

Awesome Support <= 6.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification Medium

October 16, 2023 Patched in ["6.1.5"] CVE-2023-5352

Awesome Support <= 6.1.4 - Reflected Cross-Site Scripting Medium

October 16, 2023 Patched in ["6.1.5"] CVE-2023-5354

Awesome Support <= 6.1.4 - Authenticated (Submitter+) Arbitrary File Deletion High

October 16, 2023 Patched in ["6.1.5"] CVE-2023-5355

Awesome Support <= 6.1.1 - Insecure Direct Object Reference to (Subscriber+) Ticket Export Medium

November 7, 2022 Patched in ["6.1.2"] CVE-2022-3511

Awesome Support <= 6.0.7 - Authenticated Stored Cross-Site Scripting High

September 14, 2022 Patched in ["6.0.8"] CVE-2022-38073

Awesome Support – WordPress HelpDesk & Support Plugin <= 6.0.6 - Reflected Cross-Site Scripting Medium

November 26, 2021 Patched in ["6.0.7"] CVE-2021-36919

Titan Framework <= (Various Versions) - Reflected Cross-Site Scripting Medium

August 9, 2021 Patched in ["6.0.11"] CVE-2021-24435

Awesome Support – WordPress HelpDesk & Support Plugin <= 6.0.13 - Cross-Site Scripting via post_title Medium

January 6, 2020 Patched in ["6.0.14"] CVE-2019-20181

Awesome Support – WordPress HelpDesk & Support Plugin < 3.1.7 - Cross-Site Scripting Medium

May 15, 2015 Patched in ["3.1.7"] CVE-2015-9317

Awesome Support – WordPress HelpDesk & Support Plugin <= 3.1.6 - Arbitrary Shortcode Execution Medium

May 15, 2015 Patched in ["3.1.7"] CVE-2015-9318

What It Does

Awesome Support adds a full ticketing helpdesk to WordPress, letting visitors and customers submit support requests that site staff can manage from the WordPress dashboard. It includes ticket workflows, agent assignment, email notifications, and a knowledge base for self-service FAQs. The plugin is designed to turn a WordPress site into a functional customer support portal without requiring an external platform.

Who It's For

This plugin fits small to mid-sized businesses that want a WordPress-native ticketing system rather than paying for Zendesk, Freshdesk, or similar SaaS tools. It is well suited to agencies, hosting companies, SaaS operations, and digital product sellers who already rely on WordPress for their primary website. Sites handling under a few hundred tickets per week will get the most value relative to effort.

Who Should Skip It

Anyone needing enterprise-scale ticket routing, SLAs, advanced analytics, or live chat should look at dedicated helpdesk platforms instead, since this plugin lacks those enterprise features. Solo bloggers, portfolio sites, and small contact-form use cases will also find it overkill and should stick with a free form plugin like WPForms or Contact Form 7.

The Bottom Line

Awesome Support is a competent WordPress-native helpdesk that scores well on maintenance and compatibility, but its 6,000 installs and middling 70/100 rating suggest it is a solid niche pick rather than a category leader. If you value keeping everything inside WordPress and the plugin is actively maintained, it is worth a serious evaluation. Larger teams or anyone needing advanced reporting and SLAs will likely outgrow it quickly.

Pick SupportCandy if you want a comparable WordPress-native helpdesk with a live chatbot agent and more active development discussion in its community.

EventPrime – Events Calendar, Bookings and Tickets 85/100

EventPrime is a top-scoring alternative but only relevant if your 'tickets' are for events and bookings, not customer support workflows.

Events Manager – Calendar, Bookings, Tickets, and more 81/100

Events Manager is a better option for sites that need ticketing as part of an event registration system rather than a customer service workflow.

Event Tickets and Registration 80/100

The Events Tickets plugin fits if you are selling tickets to events via WooCommerce and only need lightweight ticketing, not a helpdesk.

WP Debugging 80/100

WP Debugging is not a direct competitor but appears in the same category; it is only useful for developers debugging WordPress sites rather than end-user support.