CVE-2026-3464 | aguilatechnologies WP Customer Area Plugin up to 8.3.4 on WordPress ajax_attach_file path traversal

A vulnerability was found in aguilatechnologies WP Customer Area Plugin up to 8.3.4 on WordPress. It has been classified as critical. Affected by this vulnerability is the function ajax_attach_file. Performing a manipulation results in path traversal.

This vulnerability was named CVE-2026-3464. The attack may be initiated remotely. There is no available exploit.