Description
The SupportCandy WordPress plugin before 3.5.3 does not validate a submitted per-ticket authorization code before disclosing the real code to the requester, allowing unauthenticated users to read the contents of any support ticket.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | SupportCandy | 3.3.6 – < 3.5.3 | 3.5.3 |
References
- https://wpscan.com/vulnerability/30866042-7003-434d-9d86-c6527f97374b/ exploit vdb-entry technical-description