CVE-2026-116854

Subscriber Cross Site Scripting XSS in WP Customer Area = 8.4.0 versions...

CVE-2026-116854 WordPress WP Customer Area plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in WP Customer Area = 8.4.0 versions...

EUVD-2026-114311

Subscriber Cross Site Scripting XSS in WP Customer Area = 8.4.0 versions...

CVE-2026-116854

The WP Customer Area plugin for WordPress (versions

CVE-2026-116854: Aguila Technologies WP Customer Area: Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions.

Subscriber Cross Site Scripting XSS in WP Customer Area = 8.4.0 versions...

CVE-2026-7640: Improper Neutralization of Input During Web Page Generation

The WP Customer Area plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribute of the customer-area-protected-content shortcode in all versions up to, and including, 8.3.5. This is due to insufficient input sanitization and output escaping on the shortcode...

CVE-2026-42661 WordPress WP Customer Area plugin <= 8.3.4 - Path Traversal vulnerability

Custom role Path Traversal in WP Customer Area = 8.3.4 versions...

CVE-2026-42661 WordPress WP Customer Area plugin <= 8.3.4 - Path Traversal vulnerability

Custom role Path Traversal in WP Customer Area = 8.3.4 versions...

CVE-2026-42661

Affected software : WordPress WP Customer Area plugin

CVE-2026-42661: Path Traversal: '.../...//'

Custom role Path Traversal in WP Customer Area = 8.3.4 versions...

EUVD-2026-23448

The WP Customer Area plugin for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation in the 'ajaxattachfile' function in all versions up to, and including, 8.3.4. This makes it possible for authenticated attackers with a role that an administrator...

CVE-2026-3464

The WP Customer Area plugin for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation in the 'ajaxattachfile' function in all versions up to, and including, 8.3.4. This makes it possible for authenticated attackers with a role that an administrator...

CVE-2026-3464: Improper Limitation of a Pathname to a Restricted Directory

The WP Customer Area plugin for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation in the 'ajaxattachfile' function in all versions up to, and including, 8.3.4. This makes it possible for authenticated attackers with a role that an administrator...

CVE-2025-60201

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in aguilatechnologies WP Customer Area customer-area allows PHP Local File Inclusion.This issue affects WP Customer Area: from n/a through = 8.3.5...

CVE-2025-60201

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in aguilatechnologies WP Customer Area customer-area allows PHP Local File Inclusion. This issue affects WP Customer Area: before 8.3.4...

CVE-2025-60201: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in aguilatechnologies WP Customer Area customer-area allows PHP Local File Inclusion. This issue affects WP Customer Area: before 8.3.4...

EUVD-2025-18769

Malicious code in bioql PyPI...

EUVD-2024-50855

Malicious code in bioql PyPI...

EUVD-2024-16457

Malicious code in bioql PyPI...

CVE-2025-49982

Missing Authorization vulnerability in aguilatechnologies WP Customer Area customer-area allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Customer Area: from n/a through = 8.3.5...