Advisories · Technology

Schiocco Support Board.

Every CVE that names Schiocco Support Board among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-27395 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Support Board plugin < 3.8.9 - Privilege Escalation vulnerability
- Schiocco Support Board
- Privilege escalation
Not analysed yet 16 Jun 2026
CVE-2026-4815 CVE record

CVSS 8.7 High

SQL Injection vulnerability in Support Board
- Schiocco Support Board
- SQL injection
Not analysed yet 25 Mar 2026
CVE-2026-4816 CVE record

CVSS 4.8 Medium

Reflected Cross Site Scripting (XSS) vulnerability in Support Board
- Schiocco Support Board
- Cross-site scripting (XSS)
Not analysed yet 25 Mar 2026
CVE-2025-60182 CVE record

CVSS 7.1 High

WordPress Support Board plugin < 3.8.7 - Cross Site Scripting (XSS) vulnerability
- Schiocco Support Board
- Cross-site scripting (XSS)
Not analysed yet 18 Dec 2025
CVE-2025-54027 CVE record

CVSS 7.1 High

WordPress Support Board <= 3.8.0 - Cross Site Scripting (XSS) Vulnerability
- Schiocco Support Board
- Cross-site scripting (XSS)
Not analysed yet 20 Aug 2025
CVE-2025-54031 CVE record

CVSS 8.1 High

WordPress Support Board <= 3.8.0 - Local File Inclusion Vulnerability
- Schiocco Support Board
- File inclusion
Not analysed yet 20 Aug 2025
CVE-2025-4855 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Support Board <= 3.8.0 - Unauthenticated Authorization Bypass due to Use of Default Secret Key
- Schiocco Support Board
- Broken access control
Not analysed yet 8 Jul 2025
CVE-2025-4828 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Support Board <= 3.8.0 - Unauthenticated Arbitrary File Deletion
- Schiocco Support Board
- Path traversal
Not analysed yet 8 Jul 2025