Unknown SupportCandy

2 known vulnerabilities in Unknown SupportCandy, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-81022 CVSS 5.3 medium The SupportCandy WordPress plugin before 3.5.3 does not validate a submitted per-ticket authorization code before disclosing the real code…
CVE-2026-81021 CVSS 5.3 medium The SupportCandy WordPress plugin before 3.5.3 does not perform an authorization check on one of its support-ticket attachment download…