SupportCandy
PSM Plugins · 5 CVEs
CVE-2026-73350
HIGH
WordPress SupportCandy plugin <= 3.5.1 - Broken Authentication vulnerability
Aug 18, 2026
CVE-2026-57711
MEDIUM
WordPress SupportCandy plugin <= 3.4.8 - Cross Site Scripting (XSS) vulnerability
Jul 13, 2026
CVE-2026-54826
HIGH
WordPress SupportCandy plugin <= 3.4.6 - Insecure Direct Object References (IDOR) vulnerability
Jun 26, 2026
CVE-2026-25321
MEDIUM
WordPress SupportCandy plugin <= 3.4.4 - Broken Access Control vulnerability
Feb 19, 2026
CVE-2025-67598
MEDIUM
WordPress SupportCandy plugin <= 3.4.1 - Cross Site Request Forgery (CSRF) vulnerability
Dec 9, 2025
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-73350 | WordPress SupportCandy plugin <= 3.5.1 - Broken Authentication vulnerability | HIGH | 0.41% | Aug 18, 2026 |
| CVE-2026-57711 | WordPress SupportCandy plugin <= 3.4.8 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 0.22% | Jul 13, 2026 |
| CVE-2026-54826 | WordPress SupportCandy plugin <= 3.4.6 - Insecure Direct Object References (IDOR) vulnerability | HIGH | 0.31% | Jun 26, 2026 |
| CVE-2026-25321 | WordPress SupportCandy plugin <= 3.4.4 - Broken Access Control vulnerability | MEDIUM | 0.22% | Feb 19, 2026 |
| CVE-2025-67598 | WordPress SupportCandy plugin <= 3.4.1 - Cross Site Request Forgery (CSRF) vulnerability | MEDIUM | 0.12% | Dec 9, 2025 |
Showing 1 to 5 of 5 CVEs