Aguilatechnologies vulnerabilities

Products

• Wp Customer Area 16

Newest

• aguila technologies wp customer area WordPress WP Customer Area plugin <= 8.4.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-119524 6.5 MediumNovember 9, 2026
• aguila technologies wp customer area WordPress WP Customer Area plugin <= 8.4.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-120365 6.5 MediumNovember 7, 2026
• aguilatechnologies wp customer area WP Customer Area <= 8.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter CVE-2026-116551 6.4 MediumNovember 6, 2026
• aguila technologies wp customer area WordPress WP Customer Area plugin <= 8.4.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-57666 7.1 HighNovember 4, 2026
• aguila technologies wp customer area WordPress WP Customer Area plugin <= 8.4.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-54861 7.1 HighNovember 4, 2026
• aguila technologies wp customer area WordPress WP Customer Area plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-116854 6.5 MediumOctober 30, 2026
• aguilatechnologies wp customer area WP Customer Area <= 8.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute CVE-2026-7640 6.4 MediumJuly 14, 2026
• aguilatechnologies wp customer area WordPress WP Customer Area plugin <= 8.3.4 - Path Traversal vulnerability CVE-2026-42661 8.8 HighJune 15, 2026
• aguilatechnologies wp customer area WP Customer Area <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Read/Deletion via ajax_attach_file CVE-2026-3464 8.8 HighApril 17, 2026
• aguilatechnologies wp customer area WordPress WP Customer Area plugin <= 8.3.5 - Local File Inclusion vulnerability CVE-2025-60201 7.5 HighNovember 6, 2025
• aguilatechnologies wp customer area WordPress WP Customer Area plugin <= 8.3.4 - Broken Access Control vulnerability CVE-2025-49982 4.3 MediumJune 20, 2025
• aguilatechnologies wp customer area WP Customer Area <= 8.2.4 - Bulk Delete via CSRF CVE-2024-12436 4.3 MediumJanuary 27, 2025
• aguilatechnologies wp customer area WP Customer Area <= 8.2.4 - Event Log Deletion via CSRF CVE-2024-12280 4.3 MediumJanuary 27, 2025
• aguilatechnologies wp customer area WP Customer Area <= 8.2.2 - Reflected Cross-Site Scripting CVE-2024-0665 6.1 MediumJanuary 24, 2024
• aguilatechnologies wp customer area WP Customer Area < 8.2.1 - Subscriber+ Account Address Leak CVE-2023-6824 6.5 MediumJanuary 16, 2024
• aguilatechnologies wp customer area WP Customer Area < 8.2.1 - Subscriber+ Account Address Update CVE-2023-6741 4.3 MediumJanuary 16, 2024
• aguilatechnologies wp customer area WP Customer Area < 8.1.4 - Unauthorised Actions via CSRF CVE-2022-4745 7.1 HighFebruary 13, 2023