CVE Catalog
CVE-2026-73350
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk0.40%
33th percentile - higher than 33% of all known CVEs
Summary
Unauthenticated Broken Authentication in SupportCandy versions up to 3.5.1.
Risk Assessment
An attacker can bypass authentication mechanisms, potentially leading to unauthorized access to user accounts or sensitive data.
Recommendation
Update the SupportCandy plugin to the latest version that includes the security fix.
Original NVD description (English source)
Unauthenticated Broken Authentication in SupportCandy <= 3.5.1 versions.