The vulnerability in the WP Customer Area plugin allows a custom role to supply a file path that is not properly sanitized. This omission enables the attacker to traverse directories and read any file located on the server, which can lead to exposure of sensitive data such as configuration files, credentials, or private documents. The weakness is classified as CWE-35, representing a classic path traversal flaw that can be exploited through the plugin’s file handling interface.

All WordPress sites that use the WP Customer Area plugin from Aguilatechnologies with a version equal to or less than 8.3.4 are affected. The plugin is commonly integrated into sites that require restricted access management for users and is widely used across e-commerce, membership, and business intranet sites.

The CVSS score of 8.8 indicates a high severity, and the EPSS score of less than 1% suggests that large scale exploitation is unlikely at present. The vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is the web interface that accepts file paths from authenticated custom role users, meaning an attacker would need to create or gain access to such a role. Once enabled, the attacker could retrieve arbitrary files, potentially compromising confidentiality and the integrity of sensitive data. Because the flaw resides in a plugin that can be updated, the risk can be mitigated by applying the official fix.