What’s Vulnerable › Products

AA-Team WZone vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your AA-Team WZone version is affected

Latest AA-Team WZone vulnerabilities

• CVE-2026-27040 — WordPress WZone plugin <= 14.0.31 - Arbitrary File Deletion vulnerability (CVSS 8.8)
• CVE-2026-27039 — WordPress WZone plugin <= 14.0.31 - SQL Injection vulnerability (CVSS 8.5)
• CVE-2026-25473 — WordPress WZone plugin <= 14.0.31 - Broken Access Control vulnerability (CVSS 5.4)
• CVE-2024-33547 — WordPress WZone plugin <= 14.0.10 - Site Wide Broken Access Control vulnerability (CVSS 8.8)
• CVE-2024-33545 — WordPress WZone plugin <= 14.0.10 - Unauthenticated Broken Access Control vulnerability (CVSS 9.8)
• CVE-2024-33549 — WordPress WZone plugin <= 14.0.10 - Privilege Escalation vulnerability (CVSS 8.8)
• CVE-2024-33544 — WordPress WZone plugin <= 14.0.10 - Unauthenticated SQL Injection vulnerability (CVSS 9.3)
• CVE-2024-33548 — WordPress WZone plugin <= 14.0.10 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)