Support Board

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Support Board

Information

Software Type Plugin
Software Slug supportboard
Software Status Active
Software Author Schiocco
Software Website codecanyon.net
Software Active Installs 3,530
Software Record Last Updated June 10, 2025

12 Vulnerabilities

Submit a Vulnerability
Support Board < 3.8.9 - Unauthenticated Privilege Escalation
9.8
CVE-2026-27395
Jun 1, 2026
Researcher: Phat RiO
Support Board < 3.8.7 - Reflected Cross-Site Scripting
6.1
CVE-2025-60182
Jul 31, 2025
Researcher: Trương Hữu Phúc (truonghuuphuc)
Support Board <= 3.8.0 - Reflected Cross-Site Scripting
6.1
CVE-2025-54027
Jul 23, 2025
Researcher: Tran Nguyen Bao Khanh
Support Board <= 3.8.0 - Unauthenticated Local File Inclusion
8.1
CVE-2025-54031
Jul 22, 2025
Researcher: Tran Nguyen Bao Khanh
Support Board <= 3.8.0 - Unauthenticated Arbitrary File Deletion
9.8
CVE-2025-4828
Jul 8, 2025
Researcher: Foxyyy
Support Board <= 3.8.0 - Unauthenticated Authorization Bypass due to Use of Default Secret Key
9.8
CVE-2025-4855
Jul 8, 2025
Researcher: Foxyyy
Support Board <= 3.4.1 - Authenticated SQL Injection
8.8
CVE ID Unknown
Jan 19, 2022
Researcher: zhangxf
Support Board < 3.3.6 - Cross-Site Request Forgery
8.1
CVE-2021-24823
Oct 18, 2021
Researcher: Brandon James Roldan (tomorrowisnew)
Support Board <= 3.3.4 - Agent+ Stored Cross-Site Scripting
6.4
CVE-2021-24807
Oct 7, 2021
Researcher: John Jefferson Li
Support Board <= 3.3.3 - Multiple Unauthenticated SQL Injections
9.8
CVE-2021-24741
Sep 3, 2021
Researcher: John Jefferson Li
Support Board <= 1.2.8 - Authenticated Stored Cross-Site Scripting
6.4
CVE ID Unknown
Jun 11, 2019
Researcher: R3N0
Support Board for WordPress <= 1.2.3 - Cross-Site Scripting
6.4
CVE-2018-18373
Oct 16, 2018
Researcher: Ismail Tasdelen
Title Status CVE ID CVSS Researchers Date
Support Board < 3.8.9 - Unauthenticated Privilege Escalation Patched CVE-2026-27395 9.8 Phat RiO June 1, 2026
Support Board < 3.8.7 - Reflected Cross-Site Scripting Patched CVE-2025-60182 6.1 Trương Hữu Phúc (truonghuuphuc) July 31, 2025
Support Board <= 3.8.0 - Reflected Cross-Site Scripting Patched CVE-2025-54027 6.1 Tran Nguyen Bao Khanh July 23, 2025
Support Board <= 3.8.0 - Unauthenticated Local File Inclusion Patched CVE-2025-54031 8.1 Tran Nguyen Bao Khanh July 22, 2025
Support Board <= 3.8.0 - Unauthenticated Arbitrary File Deletion Patched CVE-2025-4828 9.8 Foxyyy July 8, 2025
Support Board <= 3.8.0 - Unauthenticated Authorization Bypass due to Use of Default Secret Key Patched CVE-2025-4855 9.8 Foxyyy July 8, 2025
Support Board <= 3.4.1 - Authenticated SQL Injection Patched 8.8 zhangxf January 19, 2022
Support Board < 3.3.6 - Cross-Site Request Forgery Patched CVE-2021-24823 8.1 Brandon James Roldan (tomorrowisnew) October 18, 2021
Support Board <= 3.3.4 - Agent+ Stored Cross-Site Scripting Patched CVE-2021-24807 6.4 John Jefferson Li October 7, 2021
Support Board <= 3.3.3 - Multiple Unauthenticated SQL Injections Patched CVE-2021-24741 9.8 John Jefferson Li September 3, 2021
Support Board <= 1.2.8 - Authenticated Stored Cross-Site Scripting Patched 6.4 R3N0 June 11, 2019
Support Board for WordPress <= 1.2.3 - Cross-Site Scripting Patched CVE-2018-18373 6.4 Ismail Tasdelen October 16, 2018

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation