CVE-2026-54826

WordPress SupportCandy plugin <= 3.4.6 - Insecure Direct Object References (IDOR) vulnerability PUBLISHED

Description (CNA)

Subscriber Insecure Direct Object References (IDOR) in SupportCandy <= 3.4.6 versions.

Vendor / product	Versions
PSM Plugins / SupportCandy	affected n/a through 3.4.6

CWE-639

CISA-ADP

No English description supplied.

No references supplied.