supportcandy_ai_customer_support_ticket_system_live_chatbot_agent vulnerabilities
CVEs whose affected-version data names the supportcandy_ai_customer_support_ticket_system_live_chatbot_agent package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-94378Medium· 6.4The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter in all versions up to, and including, 3.5.3 due to insufficient input sa…
The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter in all versions up to, and including, 3.5.3 due to insufficient input sa…
▾ Sunlitpsmplugins · SupportCandy – AI Customer Support Ticket System & Live Chatbot Agentvia NVD
CVE-2026-94539Medium· 6.5The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to time-based SQL Injection via the 'sort_by' parameter in all versions up to, and including, 3.5.3 due to insufficient escaping…
The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to time-based SQL Injection via the 'sort_by' parameter in all versions up to, and including, 3.5.3 due to insufficient escaping…
▾ Sunlitpsmplugins · SupportCandy – AI Customer Support Ticket System & Live Chatbot Agentvia NVD