Log in Start free

psmplugins

Products

ProductCVEsExploitedLatest
SupportCandy – Helpdesk & Customer Support Ticket System4–Jan 31, 2026
SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent2–Oct 3, 2026

Exploited and recent CVEs

  • CVE-2026-94539 Medium 6.5 SupportCandy <= 3.5.3 - Authenticated (Custom+) SQL Injection via 'sort_by' Parameter 0.3%
  • CVE-2026-94378 Medium 6.4 SupportCandy <= 3.5.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'name' Parameter 0.2%
  • CVE-2026-1251 Medium 5.4 SupportCandy – Helpdesk & Customer Support Ticket System <= 3.4.4 - Authenticated (Subscriber+) Insecure Direct Object Reference 0.3%
  • CVE-2026-0683 Medium 6.5 SupportCandy – Helpdesk & Customer Support Ticket System <= 3.4.4 - Authenticated (Subscriber+) SQL Injection via Number Field Filter 0.4%
  • CVE-2025-10658 Medium 6.5 SupportCandy – Helpdesk & Customer Support Ticket System <= 3.3.7 - Authentication Bypass to Support Session Takeover 0.3%
  • CVE-2024-13552 Medium 4.3 SupportCandy – Helpdesk & Customer Support Ticket System <= 3.3.0 - Insecure Direct Object Reference 0.3%