Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

WP Customer Area — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in WP Customer Area, with AI-generated Chinese analysis, references, and POCs.

Vendor: Unknown

CVE ID Title CVSS Severity Published
CVE-2026-7640 WP Customer Area <= 8.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute CWE-79 6.4 Medium 2026-07-14
CVE-2026-42661 WordPress WP Customer Area plugin <= 8.3.4 - Path Traversal vulnerability CWE-35 8.8 High 2026-06-15
CVE-2026-3464 WP Customer Area <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Read/Deletion via ajax_attach_file CWE-22 8.8 High 2026-04-17
CVE-2025-60201 WordPress WP Customer Area plugin <= 8.3.5 - Local File Inclusion vulnerability CWE-98 7.5 High 2025-11-06
CVE-2025-49982 WordPress WP Customer Area plugin <= 8.3.4 - Broken Access Control vulnerability CWE-862 4.3 Medium 2025-06-20
CVE-2024-12436 WP Customer Area <= 8.2.4 - Bulk Delete via CSRF 8.1 - 2025-01-27
CVE-2024-12280 WP Customer Area <= 8.2.4 - Event Log Deletion via CSRF 4.3 - 2025-01-27
CVE-2024-0665 WP Customer Area <= 8.2.2 - Reflected Cross-Site Scripting CWE-79 6.1 Medium 2024-01-24
CVE-2023-6824 WP Customer Area < 8.2.1 - Subscriber+ Account Address Leak 4.3 - 2024-01-16
CVE-2023-6741 WP Customer Area < 8.2.1 - Subscriber+ Account Address Update 4.3 - 2024-01-16
CVE-2022-4745 WP Customer Area < 8.1.4 - Unauthorised Actions via CSRF 7.1 - 2023-02-13

All 11 known CVE vulnerabilities affecting WP Customer Area with full Chinese analysis, references, and POCs where available.