Skip to content
OpenAdvisories

Vendor

Schiocco

8 known vulnerabilities.

Products

Support Board 8
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-27395

    WordPress Support Board plugin < 3.8.9 - Privilege Escalation vulnerability

    Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions.

    Schiocco Support Board
  • Critical 9.8
    CVE-2025-4828

    Support Board <= 3.8.0 - Unauthenticated Arbitrary File Deletion

    The Support Board plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the sb_file_delete function in all versions up to, and including, 3.8.0. This makes it possible for attackers to delete arbitrary files…

    Schiocco Support Board Web / CMS
  • Critical 9.8
    CVE-2025-4855

    Support Board <= 3.8.0 - Unauthenticated Authorization Bypass due to Use of Default Secret Key

    The Support Board plugin for WordPress is vulnerable to unauthorized access/modification/deletion of data due to use of hardcoded default secrets in the sb_encryption() function in all versions up to, and including, 3.8.0. This makes it possible for unauthent…

    Schiocco Support Board Web / CMS