Log in Start free

AA-Team

Products

ProductCVEsExploitedLatest
WZone9–Mar 25, 2026
Premium Age Verification / Restriction for WordPress3–Jun 17, 2026
Woocommerce Envato Affiliates2–May 26, 2026
Pro Bulk Watermark Plugin for WordPress2–Dec 31, 2025
Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer)2–Jan 6, 2026
Woocommerce Sales Funnel Builder1–Jan 6, 2026
Wordpress Movies Bulk Importer1–Jan 22, 2026
WZone – Lite Version1–Feb 6, 2023
Amazon Native Shopping Recommendations1–Jan 5, 2026
Premium SEO Pack1–Jan 5, 2026
Responsive Coming Soon Landing Page / Holding Page for WordPress1–Jan 6, 2026
SearchAzon1–Jan 22, 2026

Exploited and recent CVEs

  • CVE-2025-49403 High 7.5 WordPress Premium Age Verification / Restriction for WordPress Plugin <= 3.0.2 - Arbitrary File Download Vulnerability 0.3%
  • CVE-2025-14361 High 7.1 WordPress Woocommerce Envato Affiliates plugin <= 1.2.1 - Settings Change vulnerability 0.2%
  • CVE-2026-27040 High 8.8 WordPress WZone plugin <= 14.0.31 - Arbitrary File Deletion vulnerability 0.4%
  • CVE-2026-27039 High 8.5 WordPress WZone plugin <= 14.0.31 - SQL Injection vulnerability 0.3%
  • CVE-2026-25473 Medium 5.4 WordPress WZone plugin <= 14.0.31 - Broken Access Control vulnerability 0.2%
  • CVE-2026-22359 Medium 4.3 WordPress Wordpress Movies Bulk Importer plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2026-22360 Medium 4.3 WordPress SearchAzon plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-30631 High 7.1 Reflected Cross Site Scripting (XSS) vulnerability in AA-Team WordPress plugins 0.2%
  • CVE-2025-30631 High 7.1 Reflected Cross Site Scripting (XSS) vulnerability in AA-Team WordPress plugins 0.2%
  • CVE-2025-29004 High 8.8 Privilege Escalation Vulnerability in AA-Team WordPress plugins 0.3%
  • CVE-2025-29004 High 8.8 Privilege Escalation Vulnerability in AA-Team WordPress plugins 0.3%
  • CVE-2025-31044 High 8.5 WordPress Premium SEO Pack <= 3.3.2 - SQL Injection Vulnerability 0.3%
  • CVE-2025-30633 Critical 9.3 WordPress Amazon Native Shopping Recommendations Plugin <= 1.3 - SQL Injection Vulnerability 0.3%
  • CVE-2025-30628 High 8.5 WordPress Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) plugin <= 1.2 - SQL Injection Vulnerability 0.3%
  • CVE-2025-28973 Medium 6.5 WordPress Pro Bulk Watermark Plugin for WordPress <= 2.0 - Path Traversal Vulnerability 0.4%
  • CVE-2025-53297 High 7.1 WordPress Woocommerce Envato Affiliates plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-4956 Medium 4.3 WordPress Pro Bulk Watermark Plugin for WordPress Theme <= 2.0 - Path Traversal Vulnerability 0.3%
  • CVE-2025-7401 Critical 9.8 Premium Age Verification / Restriction for WordPress <= 3.0.2 - Unauthenticated Arbitrary File Read and Write via remote_tunnel.php 0.6%
  • CVE-2024-33545 Medium 5.3 WordPress WZone plugin <= 14.0.10 - Unauthenticated Broken Access Control vulnerability 0.4%
  • CVE-2024-33547 High 8.3 WordPress WZone plugin <= 14.0.10 - Site Wide Broken Access Control vulnerability 0.4%
  • CVE-2024-33549 High 8.8 WordPress WZone plugin <= 14.0.10 - Privilege Escalation vulnerability 0.5%
  • CVE-2024-33544 Critical 9.3 WordPress WZone plugin <= 14.0.10 - Unauthenticated SQL Injection vulnerability 0.6%
  • CVE-2024-33546 Critical 9.6 WordPress WZone plugin <= 14.0.10 - Arbitrary SQL Update Execution vulnerability 0.5%
  • CVE-2024-33548 High 7.1 WordPress WZone plugin <= 14.0.10 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2022-27628 Medium 4.7 WordPress WZone – Lite Version Plugin <= 3.1 Lite is vulnerable to Cross Site Request Forgery (CSRF) 0.2%