Psm Plugins Supportcandy vulnerabilities

• psm plugins supportcandy SupportCandy 3.3.6 - 3.5.2 - Unauthenticated Ticket Content Disclosure via Auth Code Leak CVE-2026-81022 5.3 MediumSeptember 9, 2026
• psm plugins supportcandy SupportCandy 3.2.9 - 3.5.2 - Unauthenticated Ticket Attachment Disclosure CVE-2026-81021 5.3 MediumSeptember 9, 2026
• psm plugins supportcandy WordPress SupportCandy plugin <= 3.5.1 - Broken Authentication vulnerability CVE-2026-73350 8.2 HighAugust 18, 2026
• psm plugins supportcandy WordPress SupportCandy plugin <= 3.4.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-57711 6.5 MediumJuly 13, 2026
• psm plugins supportcandy WordPress SupportCandy plugin <= 3.4.6 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-54826 7.6 HighJune 26, 2026
• psm plugins supportcandy WordPress SupportCandy plugin <= 3.4.4 - Broken Access Control vulnerability CVE-2026-25321 5.3 MediumFebruary 19, 2026
• psm plugins supportcandy WordPress SupportCandy plugin <= 3.4.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-67598 4.3 MediumDecember 9, 2025
• psm plugins supportcandy WordPress SupportCandy plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-27991 6.5 MediumMarch 21, 2024
• psm plugins supportcandy SupportCandy < 3.1.7 - Admin+ SQLi CVE-2023-2805 7.2 HighJune 19, 2023
• psm plugins supportcandy SupportCandy < 3.1.7 - Subscriber+ SQLi CVE-2023-2719 8.8 HighJune 19, 2023
• psm plugins supportcandy SupportCandy < 3.1.5 - Unauthenticated SQLi CVE-2023-1730 EPSS 40.6% 9.8 CriticalMay 2, 2023