Wp Customer Area (Unknown) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-01-27. Vendor: Unknown.

CVEs of Wp Customer Area

• CVE-2024-12436 - CVSS 4.3 (medium), 2025-01-27: The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF checks in some places, which could allow attackers to make logged in users perform…
• CVE-2024-12280 - CVSS 4.3 (medium), 2025-01-27: The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF check in place when deleting its logs, which could allow attackers to make a logged in…
• CVE-2023-6824 - CVSS 6.5 (medium), 2024-01-16: The WP Customer Area WordPress plugin before 8.2.1 does not properly validates user capabilities in some of its AJAX actions, allowing any users to retrieve…
• CVE-2023-6741 - CVSS 4.3 (medium), 2024-01-16: The WP Customer Area WordPress plugin before 8.2.1 does not properly validate users capabilities in some of its AJAX actions, allowing malicious users to edit…
• CVE-2022-4745 - CVSS 7.1 (high), 2023-02-13: The WP Customer Area WordPress plugin before 8.1.4 does not have CSRF checks when performing some actions such as chmod, mkdir and copy, which could allow…