WP Customer Area vulnerabilities

2 known vulnerabilities in WP Customer Area from Aguilatechnologies. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  WP Customer Area: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-3464Apr 17, 2026Aguilatechnologies

  The WP Customer Area plugin for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation in the 'ajax_attach_file' function in all versions up to, and including, 8.3.4. This makes it possible for authenticated attack

• 7.5 High severity

  WP Customer Area: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2025-60201Nov 6, 2025Aguilatechnologies

  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in aguilatechnologies WP Customer Area customer-area allows PHP Local File Inclusion. This issue affects WP Customer Area: before 8.3.4.