Supportcandy (Psm Plugins) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-08-18. Vendor: Psm Plugins.

CVEs of Supportcandy

• CVE-2026-73350 - CVSS 8.2 (high), 2026-08-18: Unauthenticated Broken Authentication in SupportCandy <= 3.5.1 versions.
• CVE-2026-57711 - CVSS 6.5 (medium), 2026-07-13: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PSM Plugins SupportCandy supportcandy allows Stored…
• CVE-2026-54826 - CVSS 7.6 (high), 2026-06-26: Subscriber Insecure Direct Object References (IDOR) in SupportCandy <= 3.4.6 versions.
• CVE-2026-25321 - CVSS 5.3 (medium), 2026-02-19: Missing Authorization vulnerability in PSM Plugins SupportCandy supportcandy allows Exploiting Incorrectly Configured Access Control Security Levels.This…
• CVE-2025-67598 - CVSS 4.3 (medium), 2025-12-09: Cross-Site Request Forgery (CSRF) vulnerability in PSM Plugins SupportCandy supportcandy allows Cross Site Request Forgery.This issue affects SupportCandy:…