Lucene search
+L

97 matches found

NVD
NVD
•added 2026/05/26 9:16 p.m.•35 views

CVE-2025-14361

Missing Authorization vulnerability in AA-Team Woocommerce Envato Affiliates allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Woocommerce Envato Affiliates: from n/a through 1.2.1...

7.1CVSS0.00248EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/26 8:58 p.m.•15 views

CVE-2025-14361

Missing Authorization vulnerability in AA-Team Woocommerce Envato Affiliates allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Woocommerce Envato Affiliates: from n/a through 1.2.1...

7.1CVSS5.8AI score0.00248EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/26 12:00 a.m.•25 views

PT-2026-43413

Name of the Vulnerable Software and Affected Versions Woocommerce Envato Affiliates versions prior to 1.2.2 Description A missing authorization issue allows access to functionality that is not properly constrained by Access Control Lists ACLs, which are sets of rules that define which users or...

7.1CVSS5.8AI score0.00248EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/26 12:00 a.m.•1 views

CVE-2025-14361: Missing Authorization

Missing Authorization vulnerability in AA-Team Woocommerce Envato Affiliates allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Woocommerce Envato Affiliates: from n/a through 1.2.1...

7.1CVSS5.8AI score0.00248EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/03/26 5:02 p.m.•15 views

CVE-2026-27039

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team WZone woozone allows Blind SQL Injection.This issue affects WZone: from n/a through = 14.0.31...

8.5CVSS5.9AI score0.00357EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/26 5:02 p.m.•15 views

CVE-2026-27040

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in AA-Team WZone woozone allows Path Traversal.This issue affects WZone: from n/a through = 14.0.31...

8.8CVSS5.8AI score0.00548EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/25 6:31 p.m.•16 views

EUVD-2026-15757

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team WZone woozone allows Blind SQL Injection.This issue affects WZone: from n/a through = 14.0.31...

5.9AI score0.00357EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/25 5:16 p.m.•16 views

CVE-2026-27039

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team WZone woozone allows Blind SQL Injection.This issue affects WZone: from n/a through = 14.0.31...

8.5CVSS0.00357EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/25 5:16 p.m.•13 views

CVE-2026-27040

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in AA-Team WZone woozone allows Path Traversal.This issue affects WZone: from n/a through = 14.0.31...

8.8CVSS0.00548EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/25 12:00 a.m.•24 views

PT-2026-27962

Name of the Vulnerable Software and Affected Versions AA-Team WZone woozone versions through 14.0.31 Description The software contains an improper neutralization of special elements used in an SQL command, leading to a Blind SQL Injection issue. This allows for potential unauthorized access to or...

8.5CVSS5.9AI score0.00357EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•1 views

CVE-2026-27039: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team WZone woozone allows Blind SQL Injection.This issue affects WZone: from n/a through = 14.0.31...

8.5CVSS5.8AI score0.00357EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•1 views

CVE-2026-27040: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in AA-Team WZone woozone allows Path Traversal.This issue affects WZone: from n/a through = 14.0.31...

8.8CVSS5.8AI score0.00548EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/25 12:00 a.m.•22 views

PT-2026-27963

Name of the Vulnerable Software and Affected Versions AA-Team WZone woozone versions through 14.0.31 Description A flaw exists in AA-Team WZone woozone that allows for path traversal. This issue is due to improper limitation of a pathname to a restricted directory. The vulnerability could...

8.8CVSS5.9AI score0.00548EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/02/20 1:27 p.m.•11 views

CVE-2026-25473

Missing Authorization vulnerability in AA-Team WZone woozone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WZone: from n/a through = 14.0.31...

5.4CVSS5.5AI score0.00298EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/19 9:16 a.m.•16 views

CVE-2026-25473

Missing Authorization vulnerability in AA-Team WZone woozone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WZone: from n/a through = 14.0.31...

5.4CVSS0.00298EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/19 8:27 a.m.•6 views

CVE-2026-25473

Missing Authorization vulnerability in AA-Team WZone woozone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WZone: from n/a through = 14.0.31...

5.5AI score0.00298EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/19 12:00 a.m.•3 views

CVE-2026-25473: Missing Authorization

Missing Authorization vulnerability in AA-Team WZone woozone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WZone: from n/a through = 14.0.31...

5.4CVSS5.9AI score0.00298EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/23 9:15 p.m.•13 views

CVE-2026-22359

Cross-Site Request Forgery CSRF vulnerability in AA-Team Wordpress Movies Bulk Importer movies importer allows Cross Site Request Forgery.This issue affects Wordpress Movies Bulk Importer: from n/a through = 1.0...

4.3CVSS5.4AI score0.00153EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/23 9:15 p.m.•14 views

CVE-2026-22360

Cross-Site Request Forgery CSRF vulnerability in AA-Team SearchAzon searchazon allows Cross Site Request Forgery.This issue affects SearchAzon: from n/a through = 1.4...

4.3CVSS5.4AI score0.00128EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/22 5:16 p.m.•20 views

CVE-2026-22360

Cross-Site Request Forgery CSRF vulnerability in AA-Team SearchAzon searchazon allows Cross Site Request Forgery.This issue affects SearchAzon: from n/a through = 1.4...

4.3CVSS0.00128EPSS
SaveExploits0References1
Rows per page
Query Builder