What’s Vulnerable › Products

psmplugins SupportCandy – Helpdesk & Customer Support Ticket System vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your psmplugins SupportCandy – Helpdesk & Customer Support Ticket System version is affected

Latest psmplugins SupportCandy – Helpdesk & Customer Support Ticket System vulnerabilities

• CVE-2026-1251 — SupportCandy – Helpdesk & Customer Support Ticket System <= 3.4.4 - Authenticated (Subscriber+) Insecure Direct Object Reference (CVSS 5.4)
• CVE-2026-0683 — SupportCandy – Helpdesk & Customer Support Ticket System <= 3.4.4 - Authenticated (Subscriber+) SQL Injection via Number Field Filter (CVSS 6.5)
• CVE-2025-10658 — SupportCandy – Helpdesk & Customer Support Ticket System <= 3.3.7 - Authentication Bypass to Support Session Takeover (CVSS 6.5)
• CVE-2024-13552 — SupportCandy – Helpdesk & Customer Support Ticket System <= 3.3.0 - Insecure Direct Object Reference (CVSS 4.3)