Log in Start free

PSM Plugins

Products

ProductCVEsExploitedLatest
SupportCandy5–Aug 18, 2026

Exploited and recent CVEs

  • CVE-2026-73350 High 8.2 WordPress SupportCandy plugin <= 3.5.1 - Broken Authentication vulnerability 0.4%
  • CVE-2026-57711 Medium 6.5 WordPress SupportCandy plugin <= 3.4.8 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-54826 High 7.6 WordPress SupportCandy plugin <= 3.4.6 - Insecure Direct Object References (IDOR) vulnerability 0.3%
  • CVE-2026-25321 Medium 5.3 WordPress SupportCandy plugin <= 3.4.4 - Broken Access Control vulnerability 0.2%
  • CVE-2025-67598 Medium 4.3 WordPress SupportCandy plugin <= 3.4.1 - Cross Site Request Forgery (CSRF) vulnerability 0.1%