Patch Ticker

WP Customer Area plugin reflected XSS

A WordPress member-area plugin can run malicious scripts in visitors' browsers.

Summary

A reflected cross-site scripting (XSS) flaw in the WordPress customer area plugin WP Customer Area. Versions 8.4.1 and older are affected.

What to do

Update to 8.4.2 or later, which is not affected.

Products and platforms

  • WP Customer Area

CVE IDs

Sources

Times

First published

First seen