What’s Vulnerable › Products

aguilatechnologies WP Customer Area vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your aguilatechnologies WP Customer Area version is affected

Latest aguilatechnologies WP Customer Area vulnerabilities

• CVE-2026-7640 — WP Customer Area <= 8.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute (CVSS 6.4)
• CVE-2026-42661 — WordPress WP Customer Area plugin <= 8.3.4 - Path Traversal vulnerability (CVSS 8.8)
• CVE-2026-3464 — WP Customer Area <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Read/Deletion via ajax_attach_file (CVSS 8.8)
• CVE-2025-60201 — WordPress WP Customer Area plugin <= 8.3.5 - Local File Inclusion vulnerability (CVSS 7.5)
• CVE-2025-49982 — WordPress WP Customer Area plugin <= 8.3.4 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2024-12436 — WP Customer Area <= 8.2.4 - Bulk Delete via CSRF (CVSS 4.3)
• CVE-2024-12280 — WP Customer Area <= 8.2.4 - Event Log Deletion via CSRF (CVSS 4.3)
• CVE-2024-0665 — WP Customer Area <= 8.2.2 - Reflected Cross-Site Scripting (CVSS 6.1)
• CVE-2023-6824 — WP Customer Area < 8.2.1 - Subscriber+ Account Address Leak (CVSS 6.5)
• CVE-2023-6741 — WP Customer Area < 8.2.1 - Subscriber+ Account Address Update (CVSS 4.3)
• CVE-2017-18519 — (CVSS 6.1)