Wp Customer Area
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:wp_customer_area:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Wp Customer Area (ec70861b-28d4-52b2-871b-d328550bf43b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-12436 |
vulnerable | 2026-06-08 06:23:51.943418 |
WP Customer Area <= 8.2.4 - Bulk Delete via CSRF
The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks
Published: 2025-01-27T06:00:06.330Z
Updated: 2025-01-27T20:06:08.471Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12280 |
vulnerable | 2026-06-08 06:23:51.599065 |
WP Customer Area <= 8.2.4 - Event Log Deletion via CSRF
The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF check in place when deleting its logs, which could allow attackers to make a logged in to delete them via a CSRF attack
Published: 2025-01-27T06:00:04.043Z
Updated: 2025-01-28T20:35:59.181Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6824 |
vulnerable | 2026-06-08 06:21:55.950379 |
WP Customer Area < 8.2.1 - Subscriber+ Account Address Leak
The WP Customer Area WordPress plugin before 8.2.1 does not properly validates user capabilities in some of its AJAX actions, allowing any users to retrieve other user's account address.
Published: 2024-01-16T15:57:00.656Z
Updated: 2025-06-11T16:39:31.579Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6741 |
vulnerable | 2026-06-08 06:21:55.610873 |
WP Customer Area < 8.2.1 - Subscriber+ Account Address Update
The WP Customer Area WordPress plugin before 8.2.1 does not properly validate users capabilities in some of its AJAX actions, allowing malicious users to edit other users' account address.
Published: 2024-01-16T15:56:59.595Z
Updated: 2025-06-20T17:22:43.549Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4745 |
vulnerable | 2026-06-08 05:52:00.279889 |
WP Customer Area < 8.1.4 - Unauthorised Actions via CSRF
The WP Customer Area WordPress plugin before 8.1.4 does not have CSRF checks when performing some actions such as chmod, mkdir and copy, which could allow attackers to make a logged-in admin perform them and create arbitrary folders, copy file for example.
Published: 2023-02-13T14:32:26.171Z
Updated: 2025-04-03T13:07:59.847Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.