The WordPress plugin called “Awesome Support – WordPress HelpDesk & Support Plugin” has a security issue where unauthorized people can change data without permission. This happens because the function called wpas_can_delete_attachments() does not have enough checks in place. This means that someone who has an account with at least subscriber-level access can delete attachments without being stopped.