Support Board for WordPress

Vulnerabilities 15Slug supportboardLatest version 3.4.8Plugin page →

Minimum safe version

3.8.7

Update to 3.8.7 or later to address 15 fixable vulnerabilities

Latest available3.4.8 ✗
Critical 9.8
2025-07-08< 3.8.1

Support Board <= 3.8.0 - Unauthenticated Arbitrary File Deletion

WordfenceEUVDCVE
Critical 9.8
2025-07-08< 3.8.1

WordPress Support Board Plugin <= 3.8.0 is vulnerable to Broken Access Control

PatchstackWordfenceEUVDCVE
N/A
< 1.2.9

Support Board &lt; 1.2.9 - Authenticated Stored Cross-Site Scripting

WPScan
N/A
< 3.4.2

SupportBoard &lt; 3.4.2 - Multiple Authenticated SQLi

WPScan
N/A
2019-06-11< 1.2.9

Support Board <= 1.2.8 - Authenticated Stored Cross-Site Scripting

Wordfence
N/A
2022-01-19< 3.4.2

Support Board <= 3.4.1 - Authenticated SQL Injection

Wordfence
N/A
2019-06-25< 1.2.9

WordPress Support Board premium plugin <= 1.2.8 - Stored Cross-Site Scripting (XSS) vulnerability

Patchstack
N/A
2022-01-19< 3.4.2

WordPress SupportBoard plugin <= 3.4.1 - Multiple Authenticated SQL Injection (SQLi) vulnerabilities

Patchstack