CVE-2024-33544

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team WZone allows SQL Injection.This issue affects WZone: from n/a through 14.0.10.

References

https://www.infosecurity-magazine.com/news/security-flaws-found-woocommerce/

https://patchstack.com/database/vulnerability/woozone/wordpress-wzone-plugin-14-0-10-unauthenticated-sql-injection-vulnerability?_s_id=cve

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS