Skip to contentSchiocco Support Board vulnerabilities
- schiocco support boardWordPress Support Board plugin < 3.8.9 - Privilege Escalation vulnerabilityCVE-2026-273959.8 Critical
- schiocco support boardSQL Injection vulnerability in Support BoardCVE-2026-48158.7 High
- schiocco support boardReflected Cross Site Scripting (XSS) vulnerability in Support BoardCVE-2026-48164.8 Medium
- schiocco support boardWordPress Support Board plugin < 3.8.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-601827.1 High
- schiocco support boardWordPress Support Board <= 3.8.0 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-540277.1 High
- schiocco support boardWordPress Support Board <= 3.8.0 - Local File Inclusion VulnerabilityCVE-2025-540318.1 High
- schiocco support boardSupport Board <= 3.8.0 - Unauthenticated Authorization Bypass due to Use of Default Secret KeyCVE-2025-48559.8 Critical
- schiocco support boardSupport Board <= 3.8.0 - Unauthenticated Arbitrary File DeletionCVE-2025-48289.8 Critical
- schiocco support boardSupport Board < 3.3.6 - Arbitrary File Deletion via CSRFCVE-2021-248238.1 High
- schiocco support boardSupport Board < 3.3.5 - Agent+ Stored Cross-Site ScriptingCVE-2021-24807Public exploit5.4 Medium
- schiocco support board, support board - chat and help desk +1 moreSupport Board < 3.3.4 - Multiple Unauthenticated SQL InjectionsCVE-2021-24741Public exploit9.8 Critical