GHSA-xqwv-9f36-ccgr: SQL injection vulnerability in the SupportCandy WordPress plugin
The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent WordPress plugin is vulnerable to time-based SQL injection via the “sort_by” parameter in all versions up to and including 3.5.3.
CERT24