psmplugins SupportCandy – Helpdesk & Customer Support Ticket System

• CVE-2026-1251 Medium 5.4 SupportCandy – Helpdesk & Customer Support Ticket System <= 3.4.4 - Authenticated (Subscriber+) Insecure Direct Object Reference 0.3%
• CVE-2026-0683 Medium 6.5 SupportCandy – Helpdesk & Customer Support Ticket System <= 3.4.4 - Authenticated (Subscriber+) SQL Injection via Number Field Filter 0.4%
• CVE-2025-10658 Medium 6.5 SupportCandy – Helpdesk & Customer Support Ticket System <= 3.3.7 - Authentication Bypass to Support Session Takeover 0.3%
• CVE-2024-13552 Medium 4.3 SupportCandy – Helpdesk & Customer Support Ticket System <= 3.3.0 - Insecure Direct Object Reference 0.3%