Supportcandy vulnerabilities

Products

• Supportcandy 10

Newest

• psm plugins supportcandy WordPress SupportCandy plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-27991 6.5 MediumMarch 21, 2024
• psm plugins supportcandy SupportCandy < 3.1.7 - Admin+ SQLi CVE-2023-2805 7.2 HighJune 19, 2023
• psm plugins supportcandy SupportCandy < 3.1.7 - Subscriber+ SQLi CVE-2023-2719 8.8 HighJune 19, 2023
• psm plugins supportcandy SupportCandy < 3.1.5 - Unauthenticated SQLi CVE-2023-1730 EPSS 40.6% 9.8 CriticalMay 2, 2023
• supportcandy, unknown supportcandy – helpdesk & support ticket system +1 more SupportCandy < 2.2.7 - Contributor+ Stored Cross-Site Scripting CVE-2021-24880 5.4 MediumFebruary 7, 2022
• supportcandy, unknown supportcandy – helpdesk & support ticket system +1 more SupportCandy < 2.2.7 - CSRF to Cross-Site Scripting CVE-2021-24879 8.8 HighFebruary 7, 2022
• supportcandy, unknown supportcandy – helpdesk & support ticket system +1 more SupportCandy < 2.2.7 - Reflected Cross-Site Scripting CVE-2021-24878 6.1 MediumFebruary 7, 2022
• supportcandy, unknown supportcandy – helpdesk & support ticket system +1 more SupportCandy < 2.2.7 - Arbitrary Ticket Deletion via CSRF CVE-2021-24843 6.5 MediumFebruary 7, 2022
• supportcandy, unknown supportcandy – helpdesk & support ticket system +1 more SupportCandy < 2.2.5 - Unauthenticated Arbitrary Ticket Deletion CVE-2021-24839 7.5 HighFebruary 7, 2022
• supportcandy An Unrestricted File Upload Vulnerability in the SupportCandy plugin through 2.0.0 for WordPress... CVE-2019-11223 9.8 CriticalApril 18, 2019