Browse CVEs

HIGH 8.8 CVE-2026-4815 A SQL Injection vulnerability has been found in Support Board v3.7.7. This vulnerability allows an attacker to retrieve, create, update and delete da… Support Board 3.7.8+ Fix from $1,9502026-03-25 MEDIUM 5.4 CVE-2026-4816 A Reflected Cross Site Scripting (XSS) vulnerability has been found in Support Board v3.7.7. This vulnerability allows an attacker to execute JavaScr… Support Board 3.7.8+ Fix from $1,6002026-03-25 CRITICAL 9.8 CVE-2025-4828 The Support Board plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the sb_file_delete functi… Support Board 3.8.1+ Fix from $2,3002025-07-09 CRITICAL 9.8 CVE-2025-4855 The Support Board plugin for WordPress is vulnerable to unauthorized access/modification/deletion of data due to use of hardcoded default secrets in … Support Board 3.8.1+ Fix from $2,3002025-07-09 HIGH 8.1 CVE-2021-24823 The Support Board WordPress plugin before 3.3.6 does not have any CSRF checks in actions handled by the include/ajax.php file, which could allow atta… Support Board 3.3.6+ Fix from $1,9502022-02-28 MEDIUM 5.4 CVE-2021-24807 The Support Board WordPress plugin before 3.3.5 allows Authenticated (Agent+) users to perform Cross-Site Scripting attacks by placing a payload in t… Support Board 3.3.5+ Fix from $1,6002021-11-08 CRITICAL 9.8 CVE-2021-24741EPSS 6% The Support Board WordPress plugin before 3.3.4 does not escape multiple POST parameters (such as status_code, department, user_id, conversation_id, … Support Board Chat And Help Desk 3.3.4+ Fix from $2,3002021-09-20 MEDIUM 5.4 CVE-2018-18373 In the Schiocco "Support Board - Chat And Help Desk" plugin 1.2.3 for WordPress, a Stored XSS vulnerability has been discovered in file upload areas … Support Board Chat And Help Desk No fix yet Fix from $1,6002018-10-17