Psm Plugins Supportcandy
5 CVEs affecting Psm Plugins Supportcandy. Latest disclosed: 2026-08-18. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-73350 | High | 8.2 | 2026-08-18 | Unauthenticated Broken Authentication in SupportCandy <= 3.5.1 versions. |
CVE-2026-54826 | High | 7.6 | 2026-06-26 | Subscriber Insecure Direct Object References (IDOR) in SupportCandy <= 3.4.6 versions. |
CVE-2026-57711 | Medium | 6.5 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PSM Plugins SupportCandy supportcandy allows Stored XSS.T… |
CVE-2026-25321 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in PSM Plugins SupportCandy supportcandy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2025-67598 | Medium | 4.3 | 2025-12-09 | Cross-Site Request Forgery (CSRF) vulnerability in PSM Plugins SupportCandy supportcandy allows Cross Site Request Forgery.This issue affects SupportCandy: fro… |