This vulnerability in Awesome Support (<= 6.3.6) arises from missing authorization checks, enabling unauthorized retrieval of embedded sensitive data. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) indicates that an attacker can exploit this remotely without authentication or user interaction, resulting in limited confidentiality impact. No integrity or availability impacts are reported. No patch or vendor advisory is currently provided, and the product is not a cloud service.

An attacker can remotely access sensitive embedded data without authorization, potentially exposing confidential information. The impact is limited to confidentiality with no reported effects on integrity or availability. There are no known active exploits targeting this vulnerability at present.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch link is provided, users should monitor the vendor's communications for updates. Until a patch is available, restrict access to the affected plugin and consider limiting exposure of the affected system to untrusted networks if feasible.