CVE Catalog
CVE-2026-73350
HighCVSS 8.2Summary
Unauthenticated Broken Authentication in SupportCandy versions up to 3.5.1.
Risk Assessment
An attacker can bypass authentication mechanisms, potentially leading to unauthorized access to user accounts or sensitive data.
Recommendation
Update the SupportCandy plugin to the latest version that includes the security fix.
Original NVD description (English source)
Unauthenticated Broken Authentication in SupportCandy <= 3.5.1 versions.