Read the docs

AA-Team

Records23All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9

Exploited now

AA-Team records in CISA KEV

No AA-Team vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wzone 2 records MEDIUM

Records

23 records

TI-2025-06742 CVE-2025-7401 · GHSA-xr9q-85p6-f6xr

Hard-coded credentials in AA-Team Premium Age Verification / Restriction for WordPress

Priority MEDIUM 50

The Premium Age Verification / Restriction for WordPress plugin for WordPress is vulnerable to arbitrary file read and write due to the existence of an insufficiently protected remote support functionality in remote_tunn…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00632 Published 2025-07-11 No fix listed CWE-798
TI-2025-21908 CVE-2025-30633 · GHSA-pff3-f65c-f555

WordPress Amazon Native Shopping Recommendations Plugin <= 1.3 - SQL Injection Vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team Amazon Native Shopping Recommendations allows SQL Injection.This issue affects Amazon Native Shopping Recommen…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00282 Published 2026-01-05 No fix listed CWE-89
TI-2024-22133 CVE-2024-33546 · GHSA-9xqh-c85q-wvfr

WordPress WZone plugin <= 14.0.10 - Arbitrary SQL Update Execution vulnerability

Priority MEDIUM 42

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team WZone allows SQL Injection.This issue affects WZone: from n/a through 14.0.10.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00529 Published 2024-04-29 No fix listed CWE-89
TI-2026-21503 CVE-2026-27040 · GHSA-88fr-wj35-pwpg

WordPress WZone plugin <= 14.0.31 - Arbitrary File Deletion vulnerability

Priority MEDIUM 40

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AA-Team WZone woozone allows Path Traversal.This issue affects WZone: from n/a through <= 14.0.31.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00397 Published 2026-03-25 No fix listed CWE-22
TI-2025-20947 CVE-2025-29004 · GHSA-49f7-mmjq-mr5h

Privilege Escalation Vulnerability in AA-Team WordPress plugins

Priority MEDIUM 40

Incorrect Privilege Assignment vulnerability in AA-Team Premium Age Verification / Restriction for WordPress, AA-Team Responsive Coming Soon Landing Page / Holding Page for WordPress allows Privilege Escalation.This issu…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00302 Published 2026-01-06 No fix listed CWE-266
TI-2026-21502 CVE-2026-27039 · GHSA-pqmj-4w77-cj6j

WordPress WZone plugin <= 14.0.31 - SQL Injection vulnerability

Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team WZone woozone allows Blind SQL Injection.This issue affects WZone: from n/a through <= 14.0.31.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00263 Published 2026-03-25 No fix listed CWE-89
TI-2025-22314 CVE-2025-31044 · GHSA-m96c-7vc7-fg87

WordPress Premium SEO Pack <= 3.3.2 - SQL Injection Vulnerability

Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 3.3.2.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00251 Published 2026-01-05 No fix listed CWE-89
TI-2025-21903 CVE-2025-30628 · GHSA-gfhh-rqgc-59cw

SQL injection in AA-Team Amazon Affiliates Addon for WPBakery Page Builder

Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) allows SQL Injection.This issue a…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00251 Published 2025-12-31 No fix listed CWE-89
TI-2025-33264 CVE-2025-53297 · GHSA-6xq4-xg55-85f9

WordPress Woocommerce Envato Affiliates plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AA-Team Woocommerce Envato Affiliates wooenvato allows Reflected XSS.This issue affects Woocommerce Envato Affiliates:…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00235 Published 2025-10-22 No fix listed CWE-79
TI-2025-21906 CVE-2025-30631 · GHSA-mf24-v8vp-hp87

Reflected Cross Site Scripting (XSS) vulnerability in AA-Team WordPress plugins

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AA-Team Woocommerce Sales Funnel Builder, AA-Team Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual C…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0018 Published 2026-01-06 No fix listed CWE-79
TI-2026-20584 CVE-2026-25473 · GHSA-533f-qxmw-wx45

WordPress WZone plugin <= 14.0.31 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in AA-Team WZone woozone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WZone: from n/a through <= 14.0.31.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00197 Published 2026-02-19 No fix listed CWE-862
TI-2026-17941 CVE-2026-22359 · GHSA-jp5v-2c4g-v5pm

WordPress Wordpress Movies Bulk Importer plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability

Priority LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in AA-Team Wordpress Movies Bulk Importer movies importer allows Cross Site Request Forgery.This issue affects Wordpress Movies Bulk Importer: from n/a through <= 1.0.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00151 Published 2026-01-22 No fix listed CWE-352
Open these records in search →