CVE-2026-27040

CVE-2026-27040 affects the WordPress plugin WZone (AA-Team WZone woozone) up to version 14.0.31. The issue is a path traversal vulnerability caused by improper limitation of a pathname to a restricted directory, enabling access to files outside the intended scope. Multiple sources (NVD, Red Hat, ...

CVE-2024-33548

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA-Team WZone allows Reflected XSS.This issue affects WZone: from n/a through 14.0.10...

PT-2024-25314 · Aa Team · Wzone

Name of the Vulnerable Software and Affected Versions: WZone versions n/a through 14.0.10 Description: A Missing Authorization vulnerability has been identified in AA-Team WZone. This issue allows for potential unauthorized access due to missing authorization checks. The estimated number of...