WP Customer Area

Vulnerabilities 12Slug customer-areaLatest version 8.3.5WordPress.org →

Minimum safe version

8.3.5

Update to 8.3.5 or later to address 10 fixable vulnerabilities

Latest available8.3.5 ✓⚠ 2 vulnerabilities have no fix

N/A

2026-05-01< 8.3.5

WP Customer Area <= 8.3.4 - Authenticated (Custom+) Path Traversal

Wordfence CVE

High 8.8

2026-04-17< 8.3.5

CVE-2026-3464

CVE Wordfence EUVD

High 7.5 Unfixed

2025-11-06≤ 8.3.5

CVE-2025-60201

CVE Wordfence

Medium 4.3 Unfixed

2025-06-20≤ 8.3.5

WordPress WP Customer Area plugin <= 8.3.4 - Broken Access Control vulnerability

CVE EUVD Wordfence

Medium 4.3

2025-01-27< 8.2.5

CVE-2024-12436

CVE EUVD Wordfence

Medium 4.3

2025-01-27< 8.2.5

CVE-2024-12280

CVE Patchstack EUVD Wordfence

Medium 6.5

2024-01-16< 8.2.1

CVE-2023-6824

CVE Wordfence WPScan

Medium 4.3

2024-01-16< 8.2.1

CVE-2023-6741

CVE Wordfence WPScan

Medium 6.1

2024-01-24< 8.2.3

CVE-2024-0665

CVE Patchstack Wordfence

High 7.1

2023-02-13< 8.1.4

CVE-2022-4745

CVE Patchstack Wordfence WPScan

N/A

2017-11-27< 7.4.3

WordPress WP Customer Area Plugin <= 7.4.2 - Reflected Cross Site Scripting vulnerability

Patchstack

Medium 6.1

2019-08-20< 7.4.3

CVE-2017-18519

CVE Wordfence WPScan