CVE-2026-57666

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aguila Technologies WP Customer Area customer-area allows Reflected XSS.This issue affects WP Customer Area: from n/a through 8.4.1...

CVE-2026-54861

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aguila Technologies WP Customer Area customer-area allows Reflected XSS.This issue affects WP Customer Area: from n/a through 8.4.1...

EUVD-2026-116775

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aguila Technologies WP Customer Area customer-area allows Reflected XSS.This issue affects WP Customer Area: from n/a through 8.4.1...

EUVD-2026-116778

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aguila Technologies WP Customer Area customer-area allows Reflected XSS.This issue affects WP Customer Area: from n/a through 8.4.1...

CVE-2026-54861 WordPress WP Customer Area plugin <= 8.4.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aguila Technologies WP Customer Area customer-area allows Reflected XSS.This issue affects WP Customer Area: from n/a through 8.4.1...

CVE-2026-57666 WordPress WP Customer Area plugin <= 8.4.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aguila Technologies WP Customer Area customer-area allows Reflected XSS.This issue affects WP Customer Area: from n/a through 8.4.1...

CVE-2026-57666

The Aguila Technologies WP Customer Area plugin (versions

CVE-2026-54861

The Aguila Technologies WP Customer Area plugin for WordPress is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw due to improper neutralization of input during web page generation. This vulnerability affects versions from n/a through 8.4.1 . An attacker could potentially exploit this to...

WordPress WP Customer Area plugin <= 8.4.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by mroccon in WordPress Plugin WP Customer Area versions = 8.4.1...

WordPress WP Customer Area plugin <= 8.4.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Van Phuc VCI - VNPT Cyber Immunity in WordPress Plugin WP Customer Area versions = 8.4.1...

CVE-2026-116854

Subscriber Cross Site Scripting XSS in WP Customer Area = 8.4.0 versions...

CVE-2026-116854

The WP Customer Area plugin for WordPress (versions

CVE-2026-116854 WordPress WP Customer Area plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in WP Customer Area = 8.4.0 versions...

CVE-2026-116854 WordPress WP Customer Area plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in WP Customer Area = 8.4.0 versions...

EUVD-2026-114311

Subscriber Cross Site Scripting XSS in WP Customer Area = 8.4.0 versions...

WordPress WP Customer Area plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by j1g3n in WordPress Plugin WP Customer Area versions = 8.4.0...

CVE-2026-116854: Aguila Technologies WP Customer Area: Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions.

Subscriber Cross Site Scripting XSS in WP Customer Area = 8.4.0 versions...

PT-2026-133761

Name of the Vulnerable Software and Affected Versions WP Customer Area versions prior to 8.4.1 Description A Cross Site Scripting XSS issue exists that allows users with Subscriber privileges to execute malicious scripts in the browser of other users. Recommendations Update to a version newer tha...

CVE-2026-7640

The WP Customer Area plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribute of the customer-area-protected-content shortcode in all versions up to, and including, 8.3.5. This is due to insufficient input sanitization and output escaping on the shortcode...

CVE-2026-7640

The WP Customer Area WordPress plugin is vulnerable to Stored Cross-Site Scripting via the type attribute of the customer-area-protected-content shortcode in all versions up to 8.3.5, due to insufficient input sanitization and output escaping. Authenticated attackers with Contributor-level access...