Medium · 4.3 CVE-2025-49982 EUVD-2025-18769GHSA-w8c6-jhx2-568h

WordPress WP Customer Area plugin <= 8.3.4 - Broken Access Control vulnerability

Published Jun 20, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Aguila Technologies Product: WP Customer Area

Description

Missing Authorization vulnerability in aguilatechnologies WP Customer Area customer-area allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Customer Area: from n/a through <= 8.3.4.

Affected products

Vendor	Product	Affected	Fixed
aguilatechnologies	WP Customer Area	≤ 8.3.4	—

References

https://patchstack.com/database/Wordpress/Plugin/customer-area/vulnerability/wordpress-wp-customer-area-plugin-8-2-5-broken-access-control-vulnerability?_s_id=cve vdb-entry