SZB-c55c811cf8
EUVD lists subscriber XSS in WP Customer Area up to 8.4.0 (EUVD-2026-114311)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Aguila Technologies
- Product
- WP Customer Area
- First seen
Summary
The EU Vulnerability Database (EUVD) lists a Subscriber Cross Site Scripting flaw in WP Customer Area versions 8.4.0 and earlier, scored 6.5/10 under CVSS v3.1. The item is an automated EUVD alert and does not describe exploitation.
If you use Aguila Technologies
Check whether WP Customer Area 8.4.0 or earlier is installed
Update to a fixed release once available
Restrict subscriber registration if it is not needed
What the sources say 1
· Mastodon: “Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions.” Source