Skip to content
Aaguilatechnologies
Exploited and recent CVEs
-
CVE-2026-7640
Medium 6.4
WP Customer Area <= 8.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute
0.3%
-
CVE-2026-42661
High 8.8
WordPress WP Customer Area plugin <= 8.3.4 - Path Traversal vulnerability
0.4%
-
CVE-2026-3464
High 8.8
WP Customer Area <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Read/Deletion via ajax_attach_file
1.0%
-
CVE-2025-60201
High 7.5
WordPress WP Customer Area plugin <= 8.3.5 - Local File Inclusion vulnerability
0.5%
-
CVE-2025-49982
Medium 4.3
WordPress WP Customer Area plugin <= 8.3.4 - Broken Access Control vulnerability
0.3%
-
CVE-2024-0665
Medium 6.1
WP Customer Area <= 8.2.2 - Reflected Cross-Site Scripting
0.5%