Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 04:32:47 +0000 EUVD-2026-282774 https://cve.radiocsirt.org/vuln/euvd-2026-282774 EUVD-2026-282774 https://cve.radiocsirt.org/vuln/euvd-2026-282774 fkie_cve-2025-10658 https://cve.radiocsirt.org/vuln/fkie_cve-2025-10658 <p>The SupportCandy – Helpdesk &amp; Customer Support Ticket System plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.3.7. This is due to missing rate limiting on the OTP verification for guest login. This makes it possible for unauthenticated attackers to bypass authentication and gain unauthorized access to customer support tickets by brute forcing the 6-digit OTP code.</p> <p>The SupportCandy – Helpdesk &amp; Customer Support Ticket System plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.3.7. This is due to missing rate limiting on the OTP verification for guest login. This makes it possible for unauthenticated attackers to bypass authentication and gain unauthorized access to customer support tickets by brute forcing the 6-digit OTP code.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-10658 GHSA-532f-pqv9-9f5r https://cve.radiocsirt.org/vuln/ghsa-532f-pqv9-9f5r <p>The SupportCandy – Helpdesk &amp; Customer Support Ticket System plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.3.7. This is due to missing rate limiting on the OTP verification for guest login. This makes it possible for unauthenticated attackers to bypass authentication and gain unauthorized access to customer support tickets by brute forcing the 6-digit OTP code.</p> <p>The SupportCandy – Helpdesk &amp; Customer Support Ticket System plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.3.7. This is due to missing rate limiting on the OTP verification for guest login. This makes it possible for unauthenticated attackers to bypass authentication and gain unauthorized access to customer support tickets by brute forcing the 6-digit OTP code.</p> https://cve.radiocsirt.org/vuln/ghsa-532f-pqv9-9f5r