Approved changes feed: RSS · Atom

cpe:2.3:a:wp-customerarea:wp_customer_area:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorWp Customerarea (c3c98c83-1cab-5296-80cc-e51addd629cf)
ProductWp Customer Area (e96c94af-5063-525d-8069-75ad0bb119ee)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/marvinlabs/customer-area purl2cpe 2026-06-01 10:16:29.601848
pkg:gitlab/wp-customerarea/plugins/customer-area purl2cpe 2026-06-01 10:16:29.601851

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-4745 vulnerable 2026-06-08 05:52:00.280779 WP Customer Area < 8.1.4 - Unauthorised Actions via CSRF
The WP Customer Area WordPress plugin before 8.1.4 does not have CSRF checks when performing some actions such as chmod, mkdir and copy, which could allow attackers to make a logged-in admin perform them and create arbitrary folders, copy file for example.
Published: 2023-02-13T14:32:26.171Z
Updated: 2025-04-03T13:07:59.847Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.