Plugin icon

WZone - WooCommerce Amazon Affiliates

woozone

Vulnerabilities:

10

Last Updated:

May 25, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2026-03-16
Title
WooCommerce Amazon Affiliates - Wordpress Plugin <= 14.0.31 - Authenticated (Subscriber+) SQL Injection
Fixed in
No known fix
CVSS
6.5 (medium)
Published
2026-03-16
Title
WooCommerce Amazon Affiliates - Wordpress Plugin <= 14.0.31 - Authenticated (Subscriber+) Arbitrary File Deletion
Fixed in
No known fix
CVSS
8.1 (high)
Published
2026-01-15
Title
WZone <= 14.0.31 - Missing Authorization
Fixed in
No known fix
CVSS
4.3 (medium)
Published
2024-04-25
Title
WooCommerce Amazon Affiliates < 14.1.0 - Reflected Cross-Site Scripting
Fixed in
Fixed in 14.1.0
CVSS
7.1 (high)
Published
2024-04-25
Title
WooCommerce Amazon Affiliates <= 14.0.33 - Subscriber+ SQL Injection
Fixed in
No known fix
CVSS
7.7 (high)
Published
2024-04-25
Title
WooCommerce Amazon Affiliates < 14.1.0 - Subscriber+ Privilege Escalation
Fixed in
Fixed in 14.1.0
CVSS
8.8 (high)
Published
2024-04-25
Title
WooCommerce Amazon Affiliates < 14.1.0 - Missing Authorization
Fixed in
Fixed in 14.1.0
CVSS
5.3 (medium)
Published
2024-04-25
Title
WooCommerce Amazon Affiliates < 14.0.31 - Unauthenticated SQL Injection
Fixed in
Fixed in 14.0.31
CVSS
8.6 (high)
Published
2024-04-25
Title
WooCommerce Amazon Affiliates < 14.1.0 - Missing Authorization
Fixed in
Fixed in 14.1.0
CVSS
4.3 (medium)
Published
2015-04-25
Title
WooCommerce Amazon Affiliates - Arbitrary File Upload
Fixed in
Fixed in 9.0.2.16
CVSS
n/a