CVE-2024-33546

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team WZone allows SQL Injection.This issue affects WZone: from n/a through 14.0.10.

References

https://github.com/codeb0ss/CVE-2024-33544-PoC

https://www.infosecurity-magazine.com/news/security-flaws-found-woocommerce/

https://patchstack.com/database/vulnerability/woozone/wordpress-wzone-plugin-14-0-10-arbitrary-sql-update-execution-vulnerability?_s_id=cve

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS