Missing Authorization Vulnerability Affects WZone

CVE-2024-33545

What is CVE-2024-33545?

The WZone plugin by AA-Team for WordPress is impacted by a missing authorization vulnerability. This flaw allows unauthorized users to gain access to functionalities that should be restricted, raising significant concerns regarding unauthorized data manipulation and access. Specifically, versions from n/a up to 14.0.10 are vulnerable. It is crucial for users of the WZone plugin to apply security patches and review user access settings to mitigate potential risks associated with this vulnerability.

References