Skip to contentAguilatechnologies Wp Customer Area vulnerabilities
- aguila technologies wp customer areaWordPress WP Customer Area plugin <= 8.4.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1195246.5 Medium
- aguila technologies wp customer areaWordPress WP Customer Area plugin <= 8.4.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1203656.5 Medium
- aguilatechnologies wp customer areaWP Customer Area <= 8.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' ParameterCVE-2026-1165516.4 Medium
- aguila technologies wp customer areaWordPress WP Customer Area plugin <= 8.4.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-576667.1 High
- aguila technologies wp customer areaWordPress WP Customer Area plugin <= 8.4.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-548617.1 High
- aguila technologies wp customer areaWordPress WP Customer Area plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1168546.5 Medium
- aguilatechnologies wp customer areaWP Customer Area <= 8.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode AttributeCVE-2026-76406.4 Medium
- aguilatechnologies wp customer areaWordPress WP Customer Area plugin <= 8.3.4 - Path Traversal vulnerabilityCVE-2026-426618.8 High
- aguilatechnologies wp customer areaWP Customer Area <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Read/Deletion via ajax_attach_fileCVE-2026-34648.8 High
- aguilatechnologies wp customer areaWordPress WP Customer Area plugin <= 8.3.5 - Local File Inclusion vulnerabilityCVE-2025-602017.5 High
- aguilatechnologies wp customer areaWordPress WP Customer Area plugin <= 8.3.4 - Broken Access Control vulnerabilityCVE-2025-499824.3 Medium
- aguilatechnologies wp customer areaWP Customer Area <= 8.2.4 - Bulk Delete via CSRFCVE-2024-124364.3 Medium
- aguilatechnologies wp customer areaWP Customer Area <= 8.2.4 - Event Log Deletion via CSRFCVE-2024-122804.3 Medium
- aguilatechnologies wp customer areaWP Customer Area <= 8.2.2 - Reflected Cross-Site ScriptingCVE-2024-06656.1 Medium
- aguilatechnologies wp customer areaWP Customer Area < 8.2.1 - Subscriber+ Account Address LeakCVE-2023-68246.5 Medium
- aguilatechnologies wp customer areaWP Customer Area < 8.2.1 - Subscriber+ Account Address UpdateCVE-2023-67414.3 Medium
- aguilatechnologies wp customer areaWP Customer Area < 8.1.4 - Unauthorised Actions via CSRFCVE-2022-47457.1 High