The SupportCandy WordPress plugin was affected by an Arbitrary File Upload security vulnerability.
UPLOAD
Christian Angel - KALASAG CERT
No
2019-04-17 (about 3 years ago)
2019-08-01 (about 3 years ago)
2020-09-22 (about 2 years ago)