Access Control

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. WordPress SupportCandy plugin <= 3.5.1 - Broken Authentication vulnerabilityCVE-2026-73350PSM Plugins · CVSS 8.2 · 0.4% likely

   CWE-266

2. SupportCandy – Helpdesk & Customer Support Ticket System <= 3.3.0 - Insecure Direct Object ReferenceCVE-2024-13552psmplugins · CVSS 4.3 · 0.3% likely

   CWE-285

3. WordPress SupportCandy plugin <= 3.4.4 - Broken Access Control vulnerabilityCVE-2026-25321PSM Plugins · CVSS 5.3 · 0.2% likely

   CWE-862

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.