aguilatechnologies

Products

ProductCVEsExploitedLatest
WP Customer Area6–Jul 14, 2026

Exploited and recent CVEs

  • CVE-2026-7640 Medium 6.4 WP Customer Area <= 8.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute 0.3%
  • CVE-2026-42661 High 8.8 WordPress WP Customer Area plugin <= 8.3.4 - Path Traversal vulnerability 0.4%
  • CVE-2026-3464 High 8.8 WP Customer Area <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Read/Deletion via ajax_attach_file 1.0%
  • CVE-2025-60201 High 7.5 WordPress WP Customer Area plugin <= 8.3.5 - Local File Inclusion vulnerability 0.5%
  • CVE-2025-49982 Medium 4.3 WordPress WP Customer Area plugin <= 8.3.4 - Broken Access Control vulnerability 0.3%
  • CVE-2024-0665 Medium 6.1 WP Customer Area <= 8.2.2 - Reflected Cross-Site Scripting 0.5%