Skip to content
OpenAdvisories

Vendor

psmplugins

6 known vulnerabilities.

Products

SupportCandy – Helpdesk & Customer Support Ticket System 4 SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2025-10658 Public exploit

    SupportCandy – Helpdesk & Customer Support Ticket System <= 3.3.7 - Authentication Bypass to Support Session Takeover

    The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.3.7. This is due to missing rate limiting on the OTP verification for guest login. This makes it p…

    psmplugins SupportCandy – Helpdesk & Customer Support Ticket System Web / CMS