Vulnerabilities in PSM Plugins

2 results

CVE-2026-25321MEDIUMWordPress SupportCandy plugin <= 3.4.4 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-67598MEDIUMWordPress SupportCandy plugin <= 3.4.1 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%