Advisories · Technology
aguilatechnologies WP Customer Area.
Every CVE that names aguilatechnologies WP Customer Area among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
WP Customer Area <= 8.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter
- aguilatechnologies WP Customer Area
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
WP Customer Area <= 8.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute
- aguilatechnologies WP Customer Area
- Cross-site scripting (XSS)
- CVSS 8.8 High
WordPress WP Customer Area plugin <= 8.3.4 - Path Traversal vulnerability
- aguilatechnologies WP Customer Area
- Path traversal
- CVSS 8.8 High
WP Customer Area <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Read/Deletion via ajax_attach_file
- aguilatechnologies WP Customer Area
- Path traversal
- CVSS 7.5 High
WordPress WP Customer Area plugin <= 8.3.5 - Local File Inclusion vulnerability
- aguilatechnologies WP Customer Area
- File inclusion
- CVSS 4.3 Medium
WordPress WP Customer Area plugin <= 8.3.4 - Broken Access Control vulnerability
- aguilatechnologies WP Customer Area
- Broken access control
- CVSS 6.1 Medium
WP Customer Area <= 8.2.2 - Reflected Cross-Site Scripting
- aguilatechnologies WP Customer Area
- Cross-site scripting (XSS)