Read the docs

Wp-customerarea

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Wp-customerarea records in CISA KEV

No Wp-customerarea vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Customer Area 1 record MEDIUM

Records

1 record in Wp Customer Area · all components

TI-2022-04341 CVE-2022-4745 · GHSA-xqmw-24v9-r296

WP Customer Area < 8.1.4 - Unauthorised Actions via CSRF

Priority MEDIUM 64

The WP Customer Area WordPress plugin before 8.1.4 does not have CSRF checks when performing some actions such as chmod, mkdir and copy, which could allow attackers to make a logged-in admin perform them and create arbit…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00276 Published 2023-02-13 Fixed in 8.1.4
Open these records in search →