Aguilatechnologies vulnerabilities
We track 2 vulnerabilities in Aguilatechnologies products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 17, 2026.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Aguilatechnologies vulnerabilities
- 8.8 High severity
WP Customer Area: Improper Limitation of a Pathname to a Restricted Directory
The WP Customer Area plugin for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation in the 'ajax_attach_file' function in all versions up to, and including, 8.3.4. This makes it possible for authenticated attack
- 7.5 High severity
WP Customer Area: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in aguilatechnologies WP Customer Area customer-area allows PHP Local File Inclusion. This issue affects WP Customer Area: before 8.3.4.