CVE Catalog
CVE-2026-42661
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.37%
29th percentile - higher than 29% of all known CVEs
Summary
The WP Customer Area plugin versions up to 8.3.4 contain a Path Traversal vulnerability, which may allow unauthorized access to system files.
Risk Assessment
An attacker could exploit this vulnerability to gain access to sensitive data, posing a serious security threat to the organization.
Recommendation
It is recommended to update the WP Customer Area plugin to the latest version to mitigate this vulnerability.
Original NVD description (English source)
Custom role Path Traversal in WP Customer Area <= 8.3.4 versions.