Psmplugins vulnerabilities

Products

• Supportcandy – Helpdesk & Customer Support Ticket System 4
• Supportcandy – Ai Customer Support Ticket System & Live Chatbot Agent 2

Newest

• psmplugins supportcandy – ai customer support ticket system & live chatbot agent SupportCandy <= 3.5.3 - Authenticated (Custom+) SQL Injection via 'sort_by' Parameter CVE-2026-94539 6.5 MediumOctober 3, 2026
• psmplugins supportcandy – ai customer support ticket system & live chatbot agent SupportCandy <= 3.5.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'name' Parameter CVE-2026-94378 6.4 MediumOctober 3, 2026
• psmplugins supportcandy – helpdesk & customer support ticket system SupportCandy – Helpdesk & Customer Support Ticket System <= 3.4.4 - Authenticated (Subscriber+) Insecure Direct Object Reference CVE-2026-1251 5.4 MediumJanuary 31, 2026
• psmplugins supportcandy – helpdesk & customer support ticket system SupportCandy – Helpdesk & Customer Support Ticket System <= 3.4.4 - Authenticated (Subscriber+) SQL Injection via Number Field Filter CVE-2026-0683 6.5 MediumJanuary 31, 2026
• psmplugins supportcandy – helpdesk & customer support ticket system SupportCandy – Helpdesk & Customer Support Ticket System <= 3.3.7 - Authentication Bypass to Support Session Takeover CVE-2025-10658 Public exploit 6.5 MediumSeptember 20, 2025
• psmplugins supportcandy – helpdesk & customer support ticket system SupportCandy – Helpdesk & Customer Support Ticket System <= 3.3.0 - Insecure Direct Object Reference CVE-2024-13552 4.3 MediumMarch 7, 2025