Vulnerabilities / SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent
SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent vulnerabilities
Advisories WPSec published for SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent. Other sources may list more. Its attack surface: SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-02 | WPSEC-2026-0283 | SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent <= 3.5.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Ticket Attachment Disclosure via Attachment ID | Medium 5.4 | 3.5.4 |
License: CC BY 4.0