Lucene search
+L

98 matches found

OSV
OSV
added 2024/06/09 12:15 p.m.8 views

CVE-2024-33545

Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10...

9.8CVSS5.8AI score0.00365EPSS
Exploits0References1
NVD
NVD
added 2024/06/09 12:15 p.m.41 views

CVE-2024-33545

Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10...

9.8CVSS0.00365EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/06/09 12:10 p.m.42 views

CVE-2024-33545 WordPress WZone plugin <= 14.0.10 - Unauthenticated Broken Access Control vulnerability

Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10...

5.3CVSS0.00365EPSS
Exploits0References1
CVE
CVE
added 2024/06/09 12:10 p.m.75 views

CVE-2024-33545

CVE-2024-33545 pertains to the WordPress WZone plugin by AA-Team and represents an Unauthenticated Missing Authorization vulnerability. Public descriptions indicate affected versions include WZone up to 14.0.10. Red Hat’s advisory reiterates the missing authorization issue and confirms the vulner...

9.8CVSS5.7AI score0.00365EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/09 12:10 p.m.18 views

CVE-2024-33545 WordPress WZone plugin <= 14.0.10 - Unauthenticated Broken Access Control vulnerability

Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10...

5.3CVSS6.9AI score0.00365EPSS
Exploits0References1
CVE
CVE
added 2024/06/09 12:8 p.m.62 views

CVE-2024-33547

CVE-2024-33547 concerns AA-Team WZone (WordPress plugin) with WZone versions up to and including 14.0.10, described as a Missing Authorization vulnerability. Public descriptions indicate this issue can enable unauthorized access due to missing authorization checks, effectively causing a site-wide...

8.8CVSS8.3AI score0.00387EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/06/09 12:8 p.m.29 views

CVE-2024-33547 WordPress WZone plugin <= 14.0.10 - Site Wide Broken Access Control vulnerability

Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10...

8.3CVSS0.00387EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/06/09 12:8 p.m.15 views

CVE-2024-33547 WordPress WZone plugin <= 14.0.10 - Site Wide Broken Access Control vulnerability

Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10...

8.3CVSS6.9AI score0.00387EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/06/09 12:0 a.m.8 views

WordPress plugin WZone security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.8CVSS6.7AI score0.00387EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/06/09 12:0 a.m.10 views

PT-2024-25314 · Aa Team · Wzone

Name of the Vulnerable Software and Affected Versions: WZone versions n/a through 14.0.10 Description: A Missing Authorization vulnerability has been identified in AA-Team WZone. This issue allows for potential unauthorized access due to missing authorization checks. The estimated number of...

8.8CVSS6.6AI score0.00387EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2024/06/09 12:0 a.m.14 views

PT-2024-25312 · Wzone · Wzone

Name of the Vulnerable Software and Affected Versions: WZone versions 14.0.10 and earlier Description: A Missing Authorization issue has been identified. This issue allows for unauthorized access. The estimated number of potentially affected devices is not specified. Recommendations: For versions...

9.8CVSS6.6AI score0.00365EPSS
Exploits0References7
CNNVD
CNNVD
added 2024/06/09 12:0 a.m.8 views

WordPress plugin WZone security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

9.8CVSS6.7AI score0.00365EPSS
Exploits0References2
NVD
NVD
added 2024/05/17 9:15 a.m.28 views

CVE-2024-33549

Improper Privilege Management vulnerability in AA-Team WZone allows Privilege Escalation.This issue affects WZone: from n/a through 14.0.10...

8.8CVSS8.8AI score0.00512EPSS
Exploits0References1
CVE
CVE
added 2024/05/17 8:18 a.m.70 views

CVE-2024-33549

CVE-2024-33549 is an Improper Privilege Management vulnerability in the WordPress plugin AA-Team WZone, enabling Privilege Escalation. Affected range includes WZone versions up to 14.0.10. Public sources in connected documents confirm the vulnerability exists and describes the impact as privilege...

8.8CVSS6.8AI score0.00512EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/05/17 8:18 a.m.28 views

CVE-2024-33549 WordPress WZone plugin <= 14.0.10 - Privilege Escalation vulnerability

Improper Privilege Management vulnerability in AA-Team WZone allows Privilege Escalation.This issue affects WZone: from n/a through 14.0.10...

8.8CVSS8.8AI score0.00512EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/17 8:18 a.m.23 views

CVE-2024-33549 WordPress WZone plugin <= 14.0.10 - Privilege Escalation vulnerability

Improper Privilege Management vulnerability in AA-Team WZone allows Privilege Escalation.This issue affects WZone: from n/a through 14.0.10...

8.8CVSS6.9AI score0.00512EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/05/17 12:0 a.m.2 views

WordPress plugin WZone 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.8CVSS6.7AI score0.00512EPSS
Exploits0References2
WPVulnDB
WPVulnDB
added 2024/05/01 12:0 a.m.11 views

WZone <= 14.0.10 - Missing Authorization

Description The WZone plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 14.0.10. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform unauthorized actions...

8.8CVSS6.7AI score0.00387EPSS
Exploits0References1
WPVulnDB
WPVulnDB
added 2024/05/01 12:0 a.m.28 views

WooCommerce Amazon Affiliates - Wordpress Plugin <= 14.0.10 - Unauthenticated SQL Injection

Description The WZone plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 14.0.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to...

9.3CVSS7.8AI score0.00629EPSS
Exploits0References1
NVD
NVD
added 2024/04/29 7:15 a.m.29 views

CVE-2024-33546

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team WZone allows SQL Injection.This issue affects WZone: from n/a through 14.0.10...

9.6CVSS9.7AI score0.00529EPSS
Exploits0References1
Rows per page
Query Builder