Psmplugins Supportcandy – Helpdesk & Customer Support Ticket System
4 CVEs affecting Psmplugins Supportcandy – Helpdesk & Customer Support Ticket System. Latest disclosed: 2026-01-31. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-0683 | Medium | 6.5 | 2026-01-31 | The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to SQL Injection via the Number-type custom field filter in all… |
CVE-2025-10658 | Medium | 6.5 | 2025-09-20 | The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including… |
CVE-2026-1251 | Medium | 5.4 | 2026-01-31 | The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and… |
CVE-2024-13552 | Medium | 4.3 | 2025-03-07 | The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and… |