PSM Plugins vulnerabilities
5 published CVEs name PSM Plugins among the affected products.
- 5Published CVEs5 of them scored
- 5Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-73350
WordPress SupportCandy plugin <= 3.5.1 - Broken Authentication vulnerability
PSM Plugins · SupportCandy
High8.2 - CVE-2026-57711
WordPress SupportCandy plugin <= 3.4.8 - Cross Site Scripting (XSS) vulnerability
PSM Plugins · SupportCandy
Medium6.5 - CVE-2026-54826
WordPress SupportCandy plugin <= 3.4.6 - Insecure Direct Object References (IDOR) vulnerability
PSM Plugins · SupportCandy
High7.6 - CVE-2026-25321
WordPress SupportCandy plugin <= 3.4.4 - Broken Access Control vulnerability
PSM Plugins · SupportCandy
Medium5.3 - CVE-2025-67598
WordPress SupportCandy plugin <= 3.4.1 - Cross Site Request Forgery (CSRF) vulnerability
PSM Plugins · SupportCandy
Medium4.3