Known CVE

SupportCandy < 3.1.5 - Unauthenticated SQL Injection

The SupportCandy WordPress plugin before 3.1.5 does not validate and escape user input before using it in an SQL statement, which could allow unauthenticated attackers to perform SQL injection attacks.

CVE-2023-1730

Critical2023CVSS 9.8CWE-89

time-based-sqli · cve2023 · sqli · wpscan · wordpress · supportcandy · unauth · vuln

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website