Skip to content
Noroxi

WP Customer Area

customer-area · plugin

Known security vulnerabilities for WP Customer Area. Find out in seconds which version runs on your site with WP Lens.

7 known vulnerabilities

latest Jul 13, 2026

Vulnerabilities

  • CVE-2026-42661

    WordPress WP Customer Area plugin <= 8.3.4 - Path Traversal vulnerability

    High 8.8

  • CVE-2026-3464

    WP Customer Area <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Read/Deletion via ajax_attach_file

    High 8.8

  • CVE-2025-60201

    WordPress WP Customer Area plugin <= 8.3.5 - Local File Inclusion vulnerability

    High 7.5

  • CVE-2026-7640

    WP Customer Area <= 8.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute

    Medium 6.4

  • CVE-2024-0665

    WP Customer Area <= 8.2.2 - Reflected Cross-Site Scripting

    Medium 6.1

  • CVE-2017-18519

    The customer-area plugin before 7.4.3 for WordPress has XSS via admin pages.

    Medium 6.1

  • CVE-2025-49982

    WordPress WP Customer Area plugin <= 8.3.4 - Broken Access Control vulnerability

    Medium 4.3

← Back to directory