Description
Unauthenticated Broken Authentication in SupportCandy <= 3.5.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PSM Plugins | SupportCandy | ≤ 3.5.1 | — |
High · 8.2
CVE-2026-73350
EUVD-2026-60777GHSA-fm54-qhj9-vvcr
WordPress SupportCandy plugin <= 3.5.1 - Broken Authentication vulnerability
Published Aug 18, 2026 · Updated Aug 18, 2026 · Assigned by Patchstack