SB
Product
Support Board
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 5Medium 2Low 0
Watch
Add Support Board to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-27395 | 9.8 | Jun 16 | WordPress Support Board plugin < 3.8.9 - Privilege Escalation vulnerability Affected: before 3.8.9 |
| CVE-2025-4855 | 9.8 | Jul 8 | Support Board <= 3.8.0 - Unauthenticated Authorization Bypass due to Use of Default Secret Key Affected: through 3.8.0 |
| CVE-2025-4828 | 9.8 | Jul 8 | Support Board <= 3.8.0 - Unauthenticated Arbitrary File Deletion Affected: through 3.8.0 |
| CVE-2026-4815 | 8.8 | Mar 25 | SQL Injection vulnerability in Support Board Affected: through 3.7.7 |
| CVE-2025-54031 | 8.1 | Aug 20 | WordPress Support Board <= 3.8.0 - Local File Inclusion Vulnerability Affected: through 3.8.0 |
| CVE-2021-24823 | 8.1 | Feb 28 | Support Board < 3.3.6 - Arbitrary File Deletion via CSRF Affected: before 3.3.6 |
| CVE-2025-60182 | 7.1 | Dec 18 | WordPress Support Board plugin < 3.8.7 - Cross Site Scripting (XSS) vulnerability Affected: through 3.8.7 |
| CVE-2025-54027 | 7.1 | Aug 20 | WordPress Support Board <= 3.8.0 - Cross Site Scripting (XSS) Vulnerability Affected: through 3.8.0 |
| CVE-2026-4816 | 5.4 | Mar 25 | Reflected Cross Site Scripting (XSS) vulnerability in Support Board Affected: through 3.7.7 |
| CVE-2021-24807 | 5.4 | Nov 8 | Support Board < 3.3.5 - Agent+ Stored Cross-Site Scripting Affected: before 3.3.5 |
Showing 10
