Skip to content
OpenAdvisories

Vendor

Aguila Technologies

12 known vulnerabilities.

Products

WP Customer Area 12
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-119524

    WordPress WP Customer Area plugin <= 8.4.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aguila Technologies WP Customer Area customer-area allows Stored XSS.This issue affects WP Customer Area: from n/a through 8.4.3.

    Aguila Technologies WP Customer Area
  • Medium 6.5
    CVE-2026-120365

    WordPress WP Customer Area plugin <= 8.4.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aguila Technologies WP Customer Area customer-area allows Stored XSS.This issue affects WP Customer Area: from n/a through 8.4.3.

    Aguila Technologies WP Customer Area
  • Medium 6.4
    CVE-2026-116551

    WP Customer Area <= 8.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter

    The WP Customer Area plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name' parameter in all versions up to, and including, 8.4.0 due to insufficient input sanitization and output escaping. This makes it possible for authenti…

    Aguila Technologies WP Customer Area Web / CMS
  • Medium 6.5
    CVE-2026-116854

    WordPress WP Customer Area plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerability

    Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions.

    Aguila Technologies WP Customer Area
  • Medium 6.4
    CVE-2026-7640

    WP Customer Area <= 8.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute

    The WP Customer Area plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribute of the `customer-area-protected-content` shortcode in all versions up to, and including, 8.3.5. This is due to insufficient input sanitization and …

    Aguila Technologies WP Customer Area Web / CMS
  • Medium 4.3
    CVE-2025-49982

    WordPress WP Customer Area plugin <= 8.3.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in aguilatechnologies WP Customer Area customer-area allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Customer Area: from n/a through <= 8.3.4.

    Aguila Technologies WP Customer Area
  • Medium 6.1
    CVE-2024-0665

    WP Customer Area <= 8.2.2 - Reflected Cross-Site Scripting

    The WP Customer Area plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 8.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate…

    Aguila Technologies WP Customer Area Web / CMS