CVE-2026-3464

Name of the Vulnerable Software and Affected Versions WP Customer Area versions prior to 8.3.5

Description Insufficient file path validation in the ajax attach file() function allows authenticated attackers with roles granted by an administrator, such as Subscriber, to read or delete arbitrary files on the server. Reading files may expose sensitive information, while deleting files, such as 'wp-config.php', can lead to remote code execution.

Recommendations Update to a version newer than 8.3.4. As a temporary workaround, restrict access to the ajax attach file() function until the update is applied.