medium6.5
CVE-2026-116854
Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions.
Impact
Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions.
Affected products
| Product | Affected versions |
|---|---|
| WP Customer Area | through 8.4.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/advisories/GHSA-r8w3-r32p-jcfv
- https://nvd.nist.gov/vuln/detail/CVE-2026-116854
- https://patchstack.com/database/wordpress/plugin/customer-area/vulnerability/wordpress-wp-customer-area-plugin-8-4-0-cross-site-scripting-xss-vulnerability?_s_id=cve