Unknown Supportcandy vulnerabilities

• psm plugins supportcandy SupportCandy 3.3.6 - 3.5.2 - Unauthenticated Ticket Content Disclosure via Auth Code Leak CVE-2026-81022 5.3 MediumSeptember 9, 2026
• psm plugins supportcandy SupportCandy 3.2.9 - 3.5.2 - Unauthenticated Ticket Attachment Disclosure CVE-2026-81021 5.3 MediumSeptember 9, 2026
• psm plugins supportcandy SupportCandy < 3.1.7 - Admin+ SQLi CVE-2023-2805 7.2 HighJune 19, 2023
• psm plugins supportcandy SupportCandy < 3.1.7 - Subscriber+ SQLi CVE-2023-2719 8.8 HighJune 19, 2023
• psm plugins supportcandy SupportCandy < 3.1.5 - Unauthenticated SQLi CVE-2023-1730 EPSS 40.6% 9.8 CriticalMay 2, 2023
• supportcandy, unknown supportcandy – helpdesk & support ticket system +1 more SupportCandy < 2.2.7 - Contributor+ Stored Cross-Site Scripting CVE-2021-24880 5.4 MediumFebruary 7, 2022
• supportcandy, unknown supportcandy – helpdesk & support ticket system +1 more SupportCandy < 2.2.7 - CSRF to Cross-Site Scripting CVE-2021-24879 8.8 HighFebruary 7, 2022
• supportcandy, unknown supportcandy – helpdesk & support ticket system +1 more SupportCandy < 2.2.7 - Reflected Cross-Site Scripting CVE-2021-24878 6.1 MediumFebruary 7, 2022
• supportcandy, unknown supportcandy – helpdesk & support ticket system +1 more SupportCandy < 2.2.7 - Arbitrary Ticket Deletion via CSRF CVE-2021-24843 6.5 MediumFebruary 7, 2022
• supportcandy, unknown supportcandy – helpdesk & support ticket system +1 more SupportCandy < 2.2.5 - Unauthenticated Arbitrary Ticket Deletion CVE-2021-24839 7.5 HighFebruary 7, 2022