Login Request a demo
SU
Product
Supportcandy
by Supportcandy · last CVE Jun 19, 2023
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 2High 4Medium 4Low 0
Severity
All severities10Critical2High4Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Supportcandy to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-1730
9.8
41%
May 2
The SupportCandy WordPress plugin before 3.1.5 does not validate and escape user input before using it in an SQL statement, which could allow unauthenticated attackers to perform…
Affected: before 3.1.5
CVE-2019-11223
9.8
9%
Apr 18
An Unrestricted File Upload Vulnerability in the SupportCandy plugin through 2.0.0 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an…
Affected: through 2.0.0
Showing 2