Aa-team vulnerabilities

Products

• Wzone 9
• Premium Age Verification / Restriction For Wordpress 3
• Amazon Affiliates Addon For Wpbakery Page Builder (formerly Visual Composer) 2
• Premium Seo Pack 2
• Pro Bulk Watermark Plugin For Wordpress 2
• Woocommerce Envato Affiliates 2

Newest

• aa-team premium age verification / restriction for wordpress WordPress Premium Age Verification / Restriction for WordPress Plugin <= 3.0.2 - Arbitrary File Download Vulnerability CVE-2025-49403 7.5 HighJune 17, 2026
• aa-team woocommerce envato affiliates WordPress Woocommerce Envato Affiliates plugin <= 1.2.1 - Settings Change vulnerability CVE-2025-14361 7.1 HighMay 26, 2026
• aa-team wzone WordPress WZone plugin <= 14.0.31 - Arbitrary File Deletion vulnerability CVE-2026-27040 8.8 HighMarch 25, 2026
• aa-team wzone WordPress WZone plugin <= 14.0.31 - SQL Injection vulnerability CVE-2026-27039 8.5 HighMarch 25, 2026
• aa-team wzone WordPress WZone plugin <= 14.0.31 - Broken Access Control vulnerability CVE-2026-25473 5.4 MediumFebruary 19, 2026
• aa-team wordpress movies bulk importer WordPress Wordpress Movies Bulk Importer plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-22359 4.3 MediumJanuary 22, 2026
• aa-team searchazon WordPress SearchAzon plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-22360 4.3 MediumJanuary 22, 2026
• aa-team amazon affiliates addon for wpbakery page builder (formerly visual composer), woocommerce sales funnel builder +1 more Reflected Cross Site Scripting (XSS) vulnerability in AA-Team WordPress plugins CVE-2025-30631 7.1 HighJanuary 6, 2026
• aa-team premium age verification / restriction for wordpress, responsive coming soon landing page / holding page for wordpress +1 more Privilege Escalation Vulnerability in AA-Team WordPress plugins CVE-2025-29004 8.8 HighJanuary 6, 2026
• aa-team premium seo pack WordPress Premium SEO Pack <= 3.3.2 - SQL Injection Vulnerability CVE-2025-31044 8.5 HighJanuary 5, 2026
• aa-team amazon native shopping recommendations WordPress Amazon Native Shopping Recommendations Plugin <= 1.3 - SQL Injection Vulnerability CVE-2025-30633 9.3 CriticalJanuary 5, 2026
• aa-team amazon affiliates addon for wpbakery page builder (formerly visual composer) WordPress Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) plugin <= 1.2 - SQL Injection Vulnerability CVE-2025-30628 8.5 HighDecember 31, 2025
• aa-team pro bulk watermark plugin for wordpress WordPress Pro Bulk Watermark Plugin for WordPress <= 2.0 - Path Traversal Vulnerability CVE-2025-28973 6.5 MediumDecember 31, 2025
• aa-team woocommerce envato affiliates WordPress Woocommerce Envato Affiliates plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-53297 7.1 HighOctober 22, 2025
• aa-team pro bulk watermark plugin for wordpress WordPress Pro Bulk Watermark Plugin for WordPress Theme <= 2.0 - Path Traversal Vulnerability CVE-2025-4956 4.3 MediumAugust 30, 2025
• aa-team premium age verification / restriction for wordpress Premium Age Verification / Restriction for WordPress <= 3.0.2 - Unauthenticated Arbitrary File Read and Write via remote_tunnel.php CVE-2025-7401 Public exploit 9.8 CriticalJuly 11, 2025
• aa-team premium seo pack WordPress Premium SEO Pack plugin <= 1.6.001 - SQL Injection vulnerability CVE-2024-50465 8.5 HighOctober 28, 2024
• aa-team wzone WordPress WZone plugin <= 14.0.10 - Unauthenticated Broken Access Control vulnerability CVE-2024-33545 5.3 MediumJune 9, 2024
• aa-team wzone WordPress WZone plugin <= 14.0.10 - Site Wide Broken Access Control vulnerability CVE-2024-33547 8.3 HighJune 9, 2024
• aa-team wzone WordPress WZone plugin <= 14.0.10 - Privilege Escalation vulnerability CVE-2024-33549 8.8 HighMay 17, 2024
• aa-team wzone WordPress WZone plugin <= 14.0.10 - Unauthenticated SQL Injection vulnerability CVE-2024-33544 9.3 CriticalApril 29, 2024
• aa-team wzone WordPress WZone plugin <= 14.0.10 - Arbitrary SQL Update Execution vulnerability CVE-2024-33546 9.6 CriticalApril 29, 2024
• aa-team wzone WordPress WZone plugin <= 14.0.10 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-33548 7.1 HighApril 29, 2024
• aa-team wzone – lite version, wzone project wzone +1 more WordPress WZone – Lite Version Plugin <= 3.1 Lite is vulnerable to Cross Site Request Forgery (CSRF) CVE-2022-27628 4.7 MediumFebruary 6, 2023