CERT24GHSA-xqwv-9f36-ccgr: SQL injection vulnerability in the SupportCandy WordPress pluginLoading data…

GHSA-xqwv-9f36-ccgr: SQL injection vulnerability in the SupportCandy WordPress plugin

The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent WordPress plugin is vulnerable to time-based SQL injection via the “sort_by” parameter in all versions up to and including 3.5.3.

← Back to intelligence

GHSA-xqwv-9f36-ccgr: SQL injection vulnerability in the SupportCandy WordPress plugin

The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent WordPress plugin is vulnerable to time-based SQL injection via the “sort_by” parameter in all versions up to and including 3.5.3.