| CVE-2026-81021 |
The SupportCandy WordPress plugin before 3.5.3 does not perform an authorization check on one of its support-ticket…
|
5.3
Moyenne
|
9 sept. 2026 |
| CVE-2026-81022 |
The SupportCandy WordPress plugin before 3.5.3 does not validate a submitted per-ticket authorization code before…
|
5.3
Moyenne
|
9 sept. 2026 |
| CVE-2023-2805 |
The SupportCandy WordPress plugin before 3.1.7 does not properly sanitise and escape the agents[] parameter in the…
|
Non notée
|
19 juin 2023 |
| CVE-2023-2719 |
The SupportCandy WordPress plugin before 3.1.7 does not properly sanitise and escape the `id` parameter for an Agent…
|
8.8
Élevée
|
19 juin 2023 |
| CVE-2023-1730 |
The SupportCandy WordPress plugin before 3.1.5 does not validate and escape user input before using it in an SQL…
|
9.8
Critique
|
2 mai 2023 |