SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent

Уязвимости

• CVE-2019-11223без авторизации

  An Unrestricted File Upload Vulnerability in the SupportCandy plugin through 2.0.0 for WordPress allows remote attackers to execute arbitrar

  Критич. 9.8

• CVE-2026-73350без авторизации≤ 3.5.1

  WordPress SupportCandy plugin <= 3.5.1 - Broken Authentication vulnerability

  Высокий 8.2

• CVE-2026-54826подписчик+≤ 3.4.6

  WordPress SupportCandy plugin <= 3.4.6 - Insecure Direct Object References (IDOR) vulnerability

  Высокий 7.6

• CVE-2025-10658без авторизации≤ 3.3.7

  SupportCandy – Helpdesk & Customer Support Ticket System <= 3.3.7 - Authentication Bypass to Support Session Takeover

  Средний 6.5

• CVE-2026-57711нужен вход≤ 3.4.8

  WordPress SupportCandy plugin <= 3.4.8 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2026-0683подписчик+≤ 3.4.4

  SupportCandy – Helpdesk & Customer Support Ticket System <= 3.4.4 - Authenticated (Subscriber+) SQL Injection via Number Field Filter

  Средний 6.5

• CVE-2024-27991нужен вход≤ 3.2.3

  WordPress SupportCandy plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2026-1251подписчик+≤ 3.4.4

  SupportCandy – Helpdesk & Customer Support Ticket System <= 3.4.4 - Authenticated (Subscriber+) Insecure Direct Object Reference

  Средний 5.4

• CVE-2026-25321без авторизации≤ 3.4.4

  WordPress SupportCandy plugin <= 3.4.4 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2025-67598без авторизации · нужен клик≤ 3.4.1

  WordPress SupportCandy plugin <= 3.4.1 - Cross Site Request Forgery (CSRF) vulnerability

  Средний 4.3

• CVE-2024-13552без авторизации≤ 3.3.0

  SupportCandy – Helpdesk & Customer Support Ticket System <= 3.3.0 - Insecure Direct Object Reference

  Средний 4.3