CVE-2024-33547

Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10...

CVE-2024-33545

Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10...

CVE-2024-33545 WordPress WZone plugin <= 14.0.10 - Unauthenticated Broken Access Control vulnerability

Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10...

CVE-2024-33545

CVE-2024-33545 pertains to the WordPress WZone plugin by AA-Team and represents an Unauthenticated Missing Authorization vulnerability. Public descriptions indicate affected versions include WZone up to 14.0.10. Red Hat’s advisory reiterates the missing authorization issue and confirms the vulner...

CVE-2024-33549

Improper Privilege Management vulnerability in AA-Team WZone allows Privilege Escalation.This issue affects WZone: from n/a through 14.0.10...

CVE-2024-33544

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team WZone allows SQL Injection.This issue affects WZone: from n/a through 14.0.10...

CVE-2024-33546

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team WZone allows SQL Injection.This issue affects WZone: from n/a through 14.0.10...

CVE-2024-33544

CVE-2024-33544 is an unauthenticated SQL injection in the WooCommerce Amazon Affiliates plugin (WooZone) for WordPress, affecting versions up to 14.0.10. The vulnerability stems from improper neutralization of input in SQL commands, enabling potential arbitrary database access. The provided conne...

CVE-2024-33546

CVE-2024-33546 is an unauthenticated SQL Injection in the WooCommerce Amazon Affiliates/WooZone plugin for WordPress, affecting WZone up to version 14.0.10. The CVSS v3.1 base vector indicates network access (AV:N) with low attack complexity (AC:L) and requires low privileges (PR:L) with no user ...

CVE-2024-33548

CVE-2024-33548 affects WooCommerce Amazon Affiliates (WooZone) WordPress plugin

CVE-2024-33548 WordPress WZone plugin <= 14.0.10 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA-Team WZone allows Reflected XSS.This issue affects WZone: from n/a through 14.0.10...

VulnCheck KEV: CVE-2024-33548

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA-Team WZone allows Reflected XSS.This issue affects WZone: from n/a through 14.0.10...

CVE-2022-27628

Cross-Site Request Forgery CSRF vulnerability in AA-Team WZone – Lite Version plugin 3.1 Lite versions...

CVE-2022-27628

Cross-Site Request Forgery CSRF vulnerability in AA-Team WZone – Lite Version plugin 3.1 Lite versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in AA-Team WZone – Lite Version plugin 3.1 Lite versions...

CVE-2022-27628

CVE-2022-27628 describes a Cross-Site Request Forgery (CSRF) vulnerability in AA-Team WZone – Lite Version plugin, affecting version 3.1 Lite. The issue enables an attacker to trick authenticated users into performing unintended actions within the application. This is documented across multiple s...

PT-2023-12911 · Aa Team · Aa-Team Wzone – Lite Version

Name of the Vulnerable Software and Affected Versions: AA-Team WZone – Lite Version plugin version 3.1 Lite Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...