A vulnerability, which was classified as critical, has been found in SupportCandy Plugin up to 3.4.4 on WordPress. This issue affects some unknown processing of the component Number Field Filter. The manipulation leads to sql injection.
This vulnerability is traded as CVE-2026-0683. It is possible to initiate the attack remotely. There is no exploit available.
