Approved changes feed: RSS · Atom

cpe:2.3:a:aa-team:wzone:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAa Team (53bc9213-62fe-5149-89ad-3d819a311aa9)
ProductWzone (2b0b9727-849e-5405-91ed-fe112aba6f36)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-27040 vulnerable 2026-06-08 07:53:21.844085 WordPress WZone plugin <= 14.0.31 - Arbitrary File Deletion vulnerability
HIGH (8.8)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AA-Team WZone woozone allows Path Traversal.This issue affects WZone: from n/a through <= 14.0.31.
Published: 2026-03-25T16:14:52.312Z
Updated: 2026-04-28T16:14:59.712Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27039 vulnerable 2026-06-08 07:53:21.843815 WordPress WZone plugin <= 14.0.31 - SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team WZone woozone allows Blind SQL Injection.This issue affects WZone: from n/a through <= 14.0.31.
Published: 2026-03-25T16:14:52.135Z
Updated: 2026-04-28T16:14:59.687Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25473 vulnerable 2026-06-08 07:53:19.848966 WordPress WZone plugin <= 14.0.31 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in AA-Team WZone woozone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WZone: from n/a through <= 14.0.31.
Published: 2026-02-19T08:27:09.151Z
Updated: 2026-04-28T16:14:59.639Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33549 vulnerable 2026-06-08 06:37:31.630669 WordPress WZone plugin <= 14.0.10 - Privilege Escalation vulnerability
HIGH (8.8)
Improper Privilege Management vulnerability in AA-Team WZone allows Privilege Escalation.This issue affects WZone: from n/a through 14.0.10.
Published: 2024-05-17T08:18:11.504Z
Updated: 2026-04-28T16:09:42.802Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33548 vulnerable 2026-06-08 06:37:31.630355 WordPress WZone plugin <= 14.0.10 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AA-Team WZone allows Reflected XSS.This issue affects WZone: from n/a through 14.0.10.
Published: 2024-04-29T05:17:53.118Z
Updated: 2026-04-28T16:09:42.848Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33547 vulnerable 2026-06-08 06:37:31.630002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33546 vulnerable 2026-06-08 06:37:31.629576 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33545 vulnerable 2026-06-08 06:37:31.627083 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33544 vulnerable 2026-06-08 06:37:31.626485 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.