AA-Team WZone WordPress Plugin Path Traversal Vulnerability Allowing Arbitrary File Deletion

A path traversal vulnerability has been identified in the AA-Team WZone WordPress plugin, specifically in versions through 14.0.31. This vulnerability allows for improper limitation of file paths, enabling arbitrary file deletion on affected websites.

Impact

Exploitation of this vulnerability could lead to the deletion of files from the WordPress site. If critical core files are removed, it may cause the website to malfunction or become nonoperational.

Remediation

Users are advised to update the WZone WordPress plugin to the latest version. If an update cannot be applied, consult with your hosting provider or web developer for assistance.