Skip to content
PluginCanary

WP Customer Area

by Aguila Technologies · 10,000+ active installs · Checked 3 Nov 2026
Healthy1 Warning

Healthy: vulnerability published 30 Oct 2026, fixed in 8.4.1.

81/ 100 Canary Score
Sub-scores for WP Customer Area
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 30 Oct 2026, fixed in 8.4.1. Update to version 8.4.1 or later.30 Oct 2026Evidence
  • InfoSEC-38 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
vprat30 Apr 2013 to 21 Feb 2023, 331 commits
tlartaud20 Jun 2018 to 19 Jun 2024, 60 commits
aguilatechnologies14 Jan 2025 to 3 Nov 2026, 36 commits

3 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
yesterday
Releases, 24 months
14
Tested up to
7.1 current
Requires PHP
7.2 supported 8.2+
Releases per quarter for WP Customer Area
Q1 20242
Q2 20241
Q3 20240
Q4 20240
Q1 20251
Q2 20250
Q3 20250
Q4 20253
Q1 20262
Q2 20261
Q3 20261
Q4 20266

Last release 3 Nov 2026. Tested with WordPress 7.1 (current).

Support

0% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
30 Oct 2026WP Customer Area <= 8.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4<= 8.4.08.4.10
13 Jul 2026WP Customer Area <= 8.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute6.4<= 8.3.58.3.60
1 May 2026WP Customer Area <= 8.3.4 - Authenticated (Custom+) Path Traversal5.3<= 8.3.48.3.50
17 Apr 2026WP Customer Area <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Read/Deletion via ajax_attach_file8.8<= 8.3.48.3.50
21 Jul 2025Customer Area < 8.3.4 - Unauthenticated Local File Inclusion8.1< 8.3.48.3.4199
19 Jun 2025WP Customer Area <= 8.3.6 - Missing Authorization4.3<= 8.3.68.3.7477
6 Jan 2025WP Customer Area <= 8.2.4 - Cross-Site Request Forgery to Bulk Deletion4.3<= 8.2.48.2.59
6 Jan 2025WP Customer Area <= 8.2.4 - Cross-Site Request Forgery to Event Log Deletion4.3<= 8.2.48.2.59
23 Jan 2024WP Customer Area <= 8.2.2 - Reflected Cross-Site Scripting6.1<= 8.2.28.2.31
10 Jan 2024WP Customer Area <= 8.2.0 - Insecure Direct Object Reference to Account Address Disclosure4.3<= 8.2.08.2.10
10 Jan 2024WP Customer Area <= 8.2.1 - Insecure Direct Object Reference to Address Modification4.3<= 8.2.08.2.10
17 Jan 2023WP Customer Area <= 8.1.3 - Cross-Site Request Forgery8.8<= 8.1.38.1.40
22 Nov 2017WP Customer Area <= 7.4.2 - Cross-Site Scripting6.1< 7.4.37.4.32

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for WP Customer Area
Q1 20245.0
Q4 20244.0
Q2 20251.0
Q4 20251.0

Average rating fell from 5.0 to 1.0 between Q1 2024 and Q4 2025.

Rating distribution
5 star59
4 star5
3 star7
2 star5
1 star13
Latest low reviews

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WP Customer Area
4 May 2026272
11 May 2026580
18 May 2026908
25 May 2026459
1 Jun 2026409
8 Jun 2026364
15 Jun 2026345
22 Jun 2026315
29 Jun 2026208
6 Jul 20264,376
13 Jul 20261,198
20 Jul 2026708
27 Jul 2026540
3 Aug 2026464
10 Aug 2026394
17 Aug 2026419
24 Aug 2026403
31 Aug 2026381
7 Sep 2026454
14 Sep 2026381
21 Sep 2026433
28 Sep 2026544
5 Oct 20263,867
12 Oct 20261,358
19 Oct 20264,626
26 Oct 202610,856
2 Nov 2026343

Weekly downloads over the last 4 weeks are 226% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version8.4.4
AuthorAguila Technologies
Added30 Apr 2013
Last updated3 Nov 2026
Active installs10,000+
Requires WordPress5.0
Tested up to7.1.4
Requires PHP7.2
CategoryCustomer Management > CRM & Customer Database
Tagsclient area, client portal, customer area, private files, customer portal

Questions

Is WP Customer Area still maintained?

WP Customer Area was last updated on 3 Nov 2026. Its Canary status is Healthy.

Is WP Customer Area safe?

WP Customer Area has no open unpatched vulnerabilities on record. 8 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns WP Customer Area?

The wordpress.org author is Aguila Technologies. Recent committers: aguilatechnologies, tlartaud, vprat, plugin-master. We have recorded no ownership change.

What can I use instead of WP Customer Area?

We have no healthier plugin in the same category on record yet.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue