Vulnerabilities and Security Researches

WP Customer Area, CVE-2023-6741

CVE, Research URL: CVE-2023-6741
Home page URL: Security reports for WP Customer Area
Application: WP Customer Area
Published on: Jan 16, 2024
Research Description: The WP Customer Area WordPress plugin before 8.2.1 does not properly validate users capabilities in some of its AJAX actions, allowing malicious users to edit other users' account address.
Affected versions: Min -, max 8.2.1.
Status: vulnerable