CVE-2025-49982

Missing Authorization vulnerability in aguilatechnologies WP Customer Area customer-area allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Customer Area: from n/a through = 8.3.4...

CVE-2025-49982

CVE-2025-49982 concerns the WordPress plugin WP Customer Area (aguilatechnologies) with a missing/incorrect authorization issue leading to broken access control in versions up to 8.2.5. The vulnerability’s impact is described as unauthorized access due to misconfigured access control levels. Publ...

CVE-2025-49982

Missing Authorization vulnerability in aguilatechnologies WP Customer Area customer-area allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Customer Area: from n/a through = 8.3.4...

PT-2025-26350 · WordPress · Wp Customer Area

Name of the Vulnerable Software and Affected Versions: WP Customer Area versions 8.2.5 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For WP Customer Area...

WordPress plugin WP Customer Area 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2025-49982: Missing Authorization

Missing Authorization vulnerability in aguilatechnologies WP Customer Area customer-area allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Customer Area: from n/a through = 8.3.4...

CVE-2024-0665

The WP Customer Area plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 8.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2024-12436

The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

CVE-2023-6824

The WP Customer Area WordPress plugin before 8.2.1 does not properly validates user capabilities in some of its AJAX actions, allowing any users to retrieve other user's account address...

CVE-2023-6741

The WP Customer Area WordPress plugin before 8.2.1 does not properly validate users capabilities in some of its AJAX actions, allowing malicious users to edit other users' account address...

CVE-2022-4745

The WP Customer Area WordPress plugin before 8.1.4 does not have CSRF checks when performing some actions such as chmod, mkdir and copy, which could allow attackers to make a logged-in admin perform them and create arbitrary folders, copy file for example...

WordPress WP Customer Area plugin < 8.2.5 - Event Log Deletion via CSRF vulnerability

Event Log Deletion via CSRF vulnerability discovered by Krugov Artyom in WordPress Plugin WP Customer Area versions 8.2.5...

CVE-2024-12436 WP Customer Area <= 8.2.4 - Bulk Delete via CSRF

The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

CVE-2024-12436

The WP Customer Area WordPress plugin (versions 8.2.4 and earlier ) is vulnerable to Cross-Site Request Forgery (CSRF) due to a lack of proper CSRF checks in certain areas. This flaw could allow an attacker to trick a logged-in user into performing unwanted actions, such as a bulk delete operatio...

CVE-2024-12280

The WP Customer Area WordPress plugin (versions 8.2.4 and earlier ) is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a missing CSRF check during the log deletion process. An attacker could leverage this to force a logged-in user to delete logs without their knowledge...

CVE-2024-12280 WP Customer Area <= 8.2.4 - Event Log Deletion via CSRF

The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF check in place when deleting its logs, which could allow attackers to make a logged in to delete them via a CSRF attack...

CVE-2024-12280 WP Customer Area <= 8.2.4 - Event Log Deletion via CSRF

The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF check in place when deleting its logs, which could allow attackers to make a logged in to delete them via a CSRF attack...

PT-2025-1801 · WordPress · Wp Customer Area

Name of the Vulnerable Software and Affected Versions: WP Customer Area versions 8.2.4 and earlier Description: The issue is related to the lack of CSRF check when deleting logs, which could allow attackers to delete them via a CSRF attack. This could potentially be exploited by making a logged-i...

WordPress plugin WP Customer Area 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-1846 · WordPress · Wp Customer Area

Name of the Vulnerable Software and Affected Versions: WP Customer Area versions 8.2.4 and earlier Description: The issue is related to the lack of CSRF checks in some places, which could allow attackers to make logged-in users perform unwanted actions via CSRF attacks. Recommendations: WP Custom...