SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 39% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ jaki-o

   1mo ago

   Our team has been really pleased with the software, and Support Candy has been awesome about responding to all of my questions while setting it up. We were surprised at how robust it is – it had every feature on our wish list. We’ve found it to be the easiest software we’ve set up in a long time.

   Read on wp.org ↗
2. ★★★★★ John Dorner

   2mo ago

   We’ve just started using SupportCandy and are VERY impressed with everything about it. The configuration and setup is very smooth. The features and functionality are very robust. Very impressed so far.

   Read on wp.org ↗
3. ★★★★★ Klaas Mertens

   9mo ago

   We had to migrate from our former E-Mail Support Solution because the support could not fix a quite important problem – and it was the best decision ever! SupportCandy is really feature rich, very flexible, offers all kinds of tweak options – and the support is outstanding! You get swift and knowledgeable response within hours or maximum days – and the response is actually helpful! They take every suggestion seriously and really strive to help you out.Definitly a 5 star review – great plugin for all your e-Mail Support needs!They even are considering to develop a further integration into our CRM System of choice – that would be the icing on the cake! Thanks @Supportcandy-Team!

   Read on wp.org ↗
4. ★★★★★ Dan

   9mo ago

   It’s a great system and I’ve really been enjoying it, except of all the features for a ticket system to not have, the ability to merge tickets is missing. Every other system I’ve ever used I was able to merge tickets and sadly our sales people and customers have created duplicate tickets that we should merge, but we can’t and it makes everything a mess.

   Read on wp.org ↗
5. ★★★★★ marziom

   11mo ago

   Supporto tecnico presente e in tempi brevi. Di solito rispondono entro un giorno lavorativo

   Read on wp.org ↗
6. ★★★★★ mihaibeilic

   11mo ago

   For your quick and professional responses! Regarding the plugin, i truly recommend to all those who need a support plugin. Give it a try and you will not regret!

   Read on wp.org ↗
7. ★★★★★ boaznire

   11mo ago

   I was searching for a reliable ticketing system for my customer support portal and ended up purchasing three different platforms (one at a time). I requested refunds for all of them within a period ranging from just 2 hours to a week none of them met my expectations. Support Candy, however, exceeded them. Not only is its ticketing system outstanding as both a software and a plugin, but their customer service is also exceptional. They always responded promptly to my questions, and whenever troubleshooting was needed, they acted immediately and provided clear steps to resolve the issue. There’s a marketing principle that says: “show, don’t tell.” Support Candy embodies this perfectly. They don’t just claim to deliver a top-class product they actually do, while backing it up with excellent service. What sets it apart even further is its customizability. Unlike other platforms that promise customizable ticketing systems but fail to deliver, Support Candy truly adapts to your needs and integrates seamlessly.

   Read on wp.org ↗
8. ★★★★★ luifel90

   11mo ago

   Very good plugin with immense customization to fill any need, also very good support from the developer on any question.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.5.0 Fix: Tickets going to archived unexpectedly 3.5.0
2. — Version 3.4.9 New: Added AI chatbot in Productivity Suite (Pro) Fix: Addressed reported security vulnerability New: Introduced new developer hook 3.4.9
3. — Version 3.4.8 New: Added Cloudflare CAPTCHA integration Fix: Resolved PHP notice issues 3.4.8
4. — Version 3.4.7 New: Option to disable email notifications for specific tickets New: Improved form validation to highlight incomplete fields on submission New: Agent collision widget added Fix: Security vulnerability resolved Fix: Email 3.4.7
5. — Version 3.4.6 New: Added Merge Ticket feature (Pro) in Productivity Suite. New: Added AI Assistant feature (Pro) in Productivity Suite. New: Archive action added for deleted tickets. Fix: Addons not updating when Home URL and Site URL 3.4.6
6. — Version 3.4.5 Fix: Resolved an issue where archived tickets could not be deleted Fix: Fixed a bug preventing actions from being performed in the settings panel Fix: Addressed reported security vulnerabilities to improve overall system 3.4.5

20 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 5.3 SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent <= 3.5.1 - Missing Authorization ↗
   2026-08-18 CVE-2026-73350 Improper Authentication Affects <= 3.5.1 Patched in 3.5.2
2. Medium · 6.4 SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent <= 3.4.8 - Authenticated (Customer+) Stored Cross-Site Scripting ↗
   2026-07-10 CVE-2026-57711 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.4.8 Patched in 3.4.9
3. Medium · 4.3 SupportCandy – Helpdesk & Customer Support Ticket System <= 3.4.6 - Authenticated (Subscriber+) Insecure Direct Object Reference ↗
   2026-06-17 CVE-2026-54826 Authorization Bypass Through User-Controlled Key Affects <= 3.4.6 Patched in 3.4.7
4. Medium · 6.5 SupportCandy – Helpdesk & Customer Support Ticket System <= 3.4.4 - Authenticated (Subscriber+) SQL Injection via Number Field Filter ↗
   2026-01-30 CVE-2026-0683 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.4.4 Patched in 3.4.5
5. Medium · 5.3 SupportCandy – Helpdesk & Customer Support Ticket System <= 3.4.4 - Missing Authorization ↗
   2026-01-29 CVE-2026-25321 Missing Authorization Affects <= 3.4.4 Patched in 3.4.5
6. Medium · 5.4 SupportCandy – Helpdesk & Customer Support Ticket System <= 3.4.4 - Authenticated (Subscriber+) Insecure Direct Object Reference ↗
   2026-01-23 CVE-2026-1251 Authorization Bypass Through User-Controlled Key Affects <= 3.4.4 Patched in 3.4.5
7. Medium · 4.3 SupportCandy <= 3.4.1 - Cross-Site Request Forgery ↗
   2025-11-21 CVE-2025-67598 Cross-Site Request Forgery (CSRF) Affects <= 3.4.1 Patched in 3.4.2
8. Medium · 6.5 SupportCandy – Helpdesk & Customer Support Ticket System <= 3.3.7 - Authentication Bypass to Support Session Takeover ↗
   2025-09-19 CVE-2025-10658 Improper Restriction of Excessive Authentication Attempts Affects <= 3.3.7 Patched in 3.3.8
9. Medium · 4.3 SupportCandy – Helpdesk & Customer Support Ticket System <= 3.3.0 - Insecure Direct Object Reference ↗
   2025-03-06 CVE-2024-13552 Improper Authorization Affects <= 3.3.0 Patched in 3.3.1
10. Medium · 6.4 SupportCandy <= 3.2.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting ↗
    2024-03-15 CVE-2024-27991 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.2.3 Patched in 3.2.4
11. High · 7.2 SupportCandy <= 3.1.6 - Authenticated (Admin+) SQL Injection ↗
    2023-05-22 CVE-2023-2805 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.1.6 Patched in 3.1.7
12. High · 8.8 SupportCandy <= 3.1.6 - Authenticated (Subscriber+) SQL Injection ↗
    2023-05-22 CVE-2023-2719 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.1.6 Patched in 3.1.7
13. Critical · 9.8 SupportCandy <= 3.1.4 - Unauthenticated SQL Injection via parse_user_filters ↗
    2023-04-10 CVE-2023-1730 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.1.4 Patched in 3.1.5
14. Medium · 6.5 SupportCandy <= 3.1.3 - Sensitive Data Exposure ↗
    2023-03-28 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 3.1.3 Patched in 3.1.4
15. Medium · 6.1 SupportCandy – Helpdesk & Support Ticket System <= 2.2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting ↗
    2022-01-05 CVE-2021-24879 Cross-Site Request Forgery (CSRF) Affects < 2.2.7 Patched in 2.2.7
16. Medium · 6.1 SupportCandy <= 2.2.6 - Reflected Cross-Site Scripting ↗
    2022-01-05 CVE-2021-24878 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.2.6 Patched in 2.2.7
17. High · 7.5 SupportCandy <= 2.2.4 - Unauthenticated Arbitrary Ticket Deletion ↗
    2022-01-05 CVE-2021-24839 Missing Authorization Affects <= 2.2.4 Patched in 2.2.5
18. Medium · 6.5 SupportCandy <= 2.2.6 - Cross-Site Request Forgery to Arbitrary Ticket Deletion ↗
    2022-01-04 CVE-2021-24843 Cross-Site Request Forgery (CSRF) Affects < 2.2.7 Patched in 2.2.7
19. Medium · 6.4 SupportCandy <= 2.2.6 - Stored Cross-Site Scripting via Shortcode ↗
    2022-01-04 CVE-2021-24880 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 2.2.7 Patched in 2.2.7
20. Critical · 9.8 SupportCandy – Helpdesk & Support Ticket System <= 2.0.0 - Arbitrary File Upload ↗
    2019-04-17 CVE-2019-11223 Unrestricted Upload of File with Dangerous Type Affects < 2.0.1 Patched in 2.0.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 28 languages, 0 at 90% or more

Plus 4 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

No tier crossings observed yet.

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Zendesk Support for WordPress 2K+ installs · 3.2★ · 3 shared tags D
• Paldesk – Live Chat & Helpdesk 30+ installs · 4.0★ · 3 shared tags D
• Viable Support for Zendesk 10+ installs · 4.0★ · 3 shared tags B
• HAPPY – Helpdesk Support Ticket System 10+ installs · 3.6★ · 3 shared tags B
• H HappyFox Helpdesk 10+ installs · 3.6★ · 3 shared tags D
• Tickzo – Support Ticket System — installs · 3.6★ · 3 shared tags B

Embed this report card

Drop a live Pulse card for SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent into a readme, a review or a deck. It updates itself.

SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent: 10K+ active installs, 4.9★ (289 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/supportcandy