CVE-2025-60201: WordPress WP Customer Area plugin <= 8.3.5 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in aguilatechnologies WP Customer Area customer-area allows PHP Local File Inclusion.
This issue affects WP Customer Area: before 8.3.4.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WP Customer Areato a version that resolves this vulnerability.Fixed in 8.3.4
Event History
Frequently Asked Questions
What is the severity of CVE-2025-60201?
CVE-2025-60201 is classified as a high-severity vulnerability due to its potential for unauthorized file inclusion.
How do I fix CVE-2025-60201?
To fix CVE-2025-60201, update the WP Customer Area plugin to a version higher than 8.2.7.
What software is affected by CVE-2025-60201?
CVE-2025-60201 affects the WP Customer Area plugin from versions n/a through 8.2.7.
What type of vulnerability is CVE-2025-60201?
CVE-2025-60201 is identified as a PHP Remote File Inclusion vulnerability allowing PHP Local File Inclusion.
Can I still use WP Customer Area if it is vulnerable to CVE-2025-60201?
While you can still use WP Customer Area, it is highly recommended to update to mitigate the risks associated with CVE-2025-60201.