Aa-team Wzone vulnerabilities

• aa-team wzone WordPress WZone plugin <= 14.0.31 - Arbitrary File Deletion vulnerability CVE-2026-27040 8.8 HighMarch 25, 2026
• aa-team wzone WordPress WZone plugin <= 14.0.31 - SQL Injection vulnerability CVE-2026-27039 8.5 HighMarch 25, 2026
• aa-team wzone WordPress WZone plugin <= 14.0.31 - Broken Access Control vulnerability CVE-2026-25473 5.4 MediumFebruary 19, 2026
• aa-team wzone WordPress WZone plugin <= 14.0.10 - Unauthenticated Broken Access Control vulnerability CVE-2024-33545 5.3 MediumJune 9, 2024
• aa-team wzone WordPress WZone plugin <= 14.0.10 - Site Wide Broken Access Control vulnerability CVE-2024-33547 8.3 HighJune 9, 2024
• aa-team wzone WordPress WZone plugin <= 14.0.10 - Privilege Escalation vulnerability CVE-2024-33549 8.8 HighMay 17, 2024
• aa-team wzone WordPress WZone plugin <= 14.0.10 - Unauthenticated SQL Injection vulnerability CVE-2024-33544 9.3 CriticalApril 29, 2024
• aa-team wzone WordPress WZone plugin <= 14.0.10 - Arbitrary SQL Update Execution vulnerability CVE-2024-33546 9.6 CriticalApril 29, 2024
• aa-team wzone WordPress WZone plugin <= 14.0.10 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-33548 7.1 HighApril 29, 2024
• aa-team wzone – lite version, wzone project wzone +1 more WordPress WZone – Lite Version Plugin <= 3.1 Lite is vulnerable to Cross Site Request Forgery (CSRF) CVE-2022-27628 4.7 MediumFebruary 6, 2023