PSM Plugins SupportCandy

• CVE-2026-73350 High 8.2 WordPress SupportCandy plugin <= 3.5.1 - Broken Authentication vulnerability 0.4%
• CVE-2026-57711 Medium 6.5 WordPress SupportCandy plugin <= 3.4.8 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2026-54826 High 7.6 WordPress SupportCandy plugin <= 3.4.6 - Insecure Direct Object References (IDOR) vulnerability 0.3%
• CVE-2026-25321 Medium 5.3 WordPress SupportCandy plugin <= 3.4.4 - Broken Access Control vulnerability 0.2%
• CVE-2025-67598 Medium 4.3 WordPress SupportCandy plugin <= 3.4.1 - Cross Site Request Forgery (CSRF) vulnerability 0.1%