Skip to content
OpenAdvisories

Vendor

AA-Team

23 known vulnerabilities.

Products

WZone 9 Premium Age Verification / Restriction for WordPress 3 Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) 2 Pro Bulk Watermark Plugin for WordPress 2 Woocommerce Envato Affiliates 2 WZone – Lite Version 1 SearchAzon 1 Amazon Native Shopping Recommendations 1 Wordpress Movies Bulk Importer 1 Responsive Coming Soon Landing Page / Holding Page for WordPress 1 Woocommerce Sales Funnel Builder 1 Premium SEO Pack 1
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • High 7.5
    CVE-2025-49403

    WordPress Premium Age Verification / Restriction for WordPress Plugin <= 3.0.2 - Arbitrary File Download Vulnerability

    Unauthenticated Arbitrary File Download in Premium Age Verification / Restriction for WordPress <= 3.0.2 versions.

    AA-Team Premium Age Verification / Restriction for WordPress Web / CMS
  • High 7.1
    CVE-2025-14361

    WordPress Woocommerce Envato Affiliates plugin <= 1.2.1 - Settings Change vulnerability

    Missing Authorization vulnerability in AA-Team Woocommerce Envato Affiliates allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Woocommerce Envato Affiliates: from n/a through 1.2.1.

    AA-Team Woocommerce Envato Affiliates Web / CMS
  • High 8.5
    CVE-2026-27039

    WordPress WZone plugin <= 14.0.31 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team WZone woozone allows Blind SQL Injection.This issue affects WZone: from n/a through <= 14.0.31.

    AA-Team WZone
  • High 8.8
    CVE-2026-27040

    WordPress WZone plugin <= 14.0.31 - Arbitrary File Deletion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AA-Team WZone woozone allows Path Traversal.This issue affects WZone: from n/a through <= 14.0.31.

    AA-Team WZone
  • High 7.1
    CVE-2025-30631

    Reflected Cross Site Scripting (XSS) vulnerability in AA-Team WordPress plugins

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AA-Team Woocommerce Sales Funnel Builder, AA-Team Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) allows Reflected XSS.This issu…

    AA-Team Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) Woocommerce Sales Funnel Builder Web / CMS
  • High 8.8
    CVE-2025-29004

    Privilege Escalation Vulnerability in AA-Team WordPress plugins

    Incorrect Privilege Assignment vulnerability in AA-Team Premium Age Verification / Restriction for WordPress, AA-Team Responsive Coming Soon Landing Page / Holding Page for WordPress allows Privilege Escalation.This issue affects Premium Age Verification / Re…

    AA-Team Premium Age Verification / Restriction for WordPress Responsive Coming Soon Landing Page / Holding Page for WordPress Web / CMS
  • High 8.5
    CVE-2025-31044

    WordPress Premium SEO Pack <= 3.3.2 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 3.3.2.

    AA-Team Premium SEO Pack
  • High 8.5
    CVE-2025-30628

    WordPress Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) plugin <= 1.2 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) allows SQL Injection.This issue affects Amazon Affiliates Addon for WPBa…

    AA-Team Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer)
  • High 7.1
    CVE-2025-53297

    WordPress Woocommerce Envato Affiliates plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AA-Team Woocommerce Envato Affiliates wooenvato allows Reflected XSS.This issue affects Woocommerce Envato Affiliates: from n/a through <= 1.2.1.

    AA-Team Woocommerce Envato Affiliates Web / CMS
  • High 8.3
    CVE-2024-33547

    WordPress WZone plugin <= 14.0.10 - Site Wide Broken Access Control vulnerability

    Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10.

    AA-Team WZone
  • High 8.8
    CVE-2024-33549

    WordPress WZone plugin <= 14.0.10 - Privilege Escalation vulnerability

    Improper Privilege Management vulnerability in AA-Team WZone allows Privilege Escalation.This issue affects WZone: from n/a through 14.0.10.

    AA-Team WZone
  • High 7.1
    CVE-2024-33548

    WordPress WZone plugin <= 14.0.10 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AA-Team WZone allows Reflected XSS.This issue affects WZone: from n/a through 14.0.10.

    AA-Team WZone