Patch Ticker

WP Customer Area plugin reflected XSS flaw

A WordPress member-area plugin can let visitors' logins be stolen.

Summary

A reflected cross-site scripting (XSS) flaw in the WP Customer Area WordPress plugin. Sites running version 8.4.1 and older are affected.

What to do

Check that the site runs a version newer than 8.4.1, and read the vendor's advisory.

Products and platforms

  • WP Customer Area

CVE IDs

Sources

Times

First published

First seen