Awesome Support < 6.1.7 - Insufficient Authorization via wpas_can_delete_attachments()

Description

The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to an insufficient capability check in the wpas_can_delete_attachments() function in all versions up to, and including 6.1.6. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete attachments.