WPScan
How it worksPricing
Vulnerabilities
WordPressPluginsThemesStatsSubmit vulnerabilities
For developers
StatusAPI detailsCLI scanner
Contact

WordPress Plugin Vulnerabilities

SupportCandy – Helpdesk & Support Ticket System

2022-01-05
SupportCandy < 2.2.7 - Contributor+ Stored Cross-Site Scripting
Fixed in version 2.2.7
2022-01-05
SupportCandy < 2.2.7 - CSRF to Cross-Site Scripting
Fixed in version 2.2.7
2022-01-05
SupportCandy < 2.2.7 - Reflected Cross-Site Scripting
Fixed in version 2.2.7
2022-01-05
SupportCandy < 2.2.7 - Arbitrary Ticket Deletion via CSRF
Fixed in version 2.2.7
2022-01-05
SupportCandy < 2.2.5 - Unauthenticated Arbitrary Ticket Deletion
Fixed in version 2.2.5
2019-04-17
SupportCandy <= 2.0.0 - Arbitrary File Upload
Fixed in version 2.0.1