Marvinlabs Wp_customer_area
6 CVEs affecting Marvinlabs Wp_customer_area. Latest disclosed: 2025-01-27. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-6824 | Medium | 6.5 | 2024-01-16 | The WP Customer Area WordPress plugin before 8.2.1 does not properly validates user capabilities in some of its AJAX actions, allowing any users to retrieve ot… |
CVE-2024-0665 | Medium | 6.1 | 2024-01-24 | The WP Customer Area plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 8.2.1 d… |
CVE-2017-18519 | Medium | 6.1 | 2019-08-20 | The customer-area plugin before 7.4.3 for WordPress has XSS via admin pages. |
CVE-2024-12436 | Medium | 4.3 | 2025-01-27 | The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwan… |
CVE-2024-12280 | Medium | 4.3 | 2025-01-27 | The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF check in place when deleting its logs, which could allow attackers to make a logged in t… |
CVE-2023-6741 | Medium | 4.3 | 2024-01-16 | The WP Customer Area WordPress plugin before 8.2.1 does not properly validate users capabilities in some of its AJAX actions, allowing malicious users to edit… |