AA-Team WZone vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting AA-Team WZone: 3 record(s), with affected versions and fixes.

CVE-2026-27040 High · 8.8 CWE-22 Mar 25, 2026

WordPress WZone plugin <= 14.0.31 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AA-Team WZone woozone allows Path Traversal.This issue affects WZone: from n/a through <= 14.0.31.

CVE-2026-27039 High · 8.5 CWE-89 Mar 25, 2026

WordPress WZone plugin <= 14.0.31 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team WZone woozone allows Blind SQL Injection.This issue affects WZone: from n/a through <= 14.0.31.

CVE-2026-25473 Medium · 5.4 CWE-862 Feb 19, 2026

WordPress WZone plugin <= 14.0.31 - Broken Access Control vulnerability

Missing Authorization vulnerability in AA-Team WZone woozone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WZone: from n/a through <= 14.0.31.