WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent

Enhance your WordPress site with our AI Powered customer support ticket system. Manage customer support, tickets, and email tickets efficiently.

20Reported vulnerabilities
9.8Highest CVSS score
3.5.2Latest version
10,000+Active installs

What to do now

Update SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent to 3.5.2 or later. 20 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 11, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2023-1730 Critical 9.8 40.6% Before 3.1.5 3.1.5 May 2, 2023
CVE-2019-11223 Critical 9.8 8.8% 2.0.0 and earlier 2.0.1 April 18, 2019
CVE-2023-2719 High 8.8 1.2% Before 3.1.7 3.1.7 June 19, 2023
CVE-2021-24879 High 8.8 0.6% Before 2.2.7 2.2.7 February 7, 2022
CVE-2021-24839 High 7.5 1.2% Before 2.2.5 2.2.5 February 7, 2022
CVE-2023-2805 High 7.2 0.9% Before 3.1.7 3.1.7 June 19, 2023
CVE-2021-24843 Medium 6.5 0.5% Before 2.2.7 2.2.7 February 7, 2022
CVE-2021-24878 Medium 6.1 1.2% Before 2.2.7 2.2.7 February 7, 2022
CVE-2021-24880 Medium 5.4 0.6% Before 2.2.7 2.2.7 February 7, 2022
CVE-2026-0683 Medium 6.5 0.4% 0 to 3.4.4 (inclusive) 3.4.5 January 31, 2026
CVE-2025-10658 Medium 6.5 0.3% 0 to 3.3.7 (inclusive) 3.3.8 September 20, 2025
CVE-2024-27991 Medium 6.4 0.3% 3.2.3 and earlier 3.2.4 March 15, 2024
WF-07c0b4c5-d76e-4bdc-87d1-3144a1466c77 Medium 6.5 — 3.1.3 and earlier 3.1.4 March 28, 2023
CVE-2026-57711 Medium 6.4 0.2% 3.4.8 and earlier 3.4.9 July 10, 2026
CVE-2026-1251 Medium 5.4 0.3% 0 to 3.4.4 (inclusive) 3.4.5 January 31, 2026
CVE-2026-73350 Medium 5.3 0.4% 3.5.1 and earlier 3.5.2 August 18, 2026
CVE-2026-25321 Medium 5.3 0.2% 3.4.4 and earlier 3.4.5 January 29, 2026
CVE-2026-54826 Medium 4.3 0.3% 3.4.6 and earlier 3.4.7 June 17, 2026
CVE-2025-67598 Medium 4.3 0.1% 3.4.1 and earlier 3.4.2 November 21, 2025
CVE-2024-13552 Medium 4.3 0.3% 0 to 3.3.0 (inclusive) 3.3.1 March 7, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.