Missing Authorization Vulnerability Affects WZone
CVE-2024-33547

8.8HIGH

Key Information:

Vendor
WordPress
Status
Wzone
Vendor
CVE Published:
9 June 2024

Summary

The AA-Team WZone plugin is affected by a missing authorization vulnerability that can lead to unauthorized access to sensitive features. This vulnerability impacts all versions up to and including 14.0.10, making it crucial for users to review their access control measures. Administrators using the WZone plugin should assess their configurations immediately to mitigate the risks associated with potential exploitation.

Affected Version(s)

WZone <= 14.0.10

References

https://patchstack.com/database/vulnerability/woozone/wor...
vdb-entry

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Rafie Muhammad (Patchstack)
.