Description
Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Aguila Technologies | WP Customer Area | ≤ 8.4.0 | — |
Medium · 6.5
CVE-2026-116854
EUVD-2026-114311GHSA-r8w3-r32p-jcfv
WordPress WP Customer Area plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerability
Published Oct 30, 2026 · Updated Oct 30, 2026 · Assigned by Patchstack