WC
Product
Woffice Core
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 4Low 0
Watch
Add Woffice Core to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-67919 | 6.5 | Jan 8 | WordPress Woffice Core plugin <= 5.4.30 - Insecure Direct Object References (IDOR) vulnerability Affected: through 5.4.30 |
| CVE-2024-37471 | 6.1 | Jul 4 | WordPress Woffice Core plugin <= 5.4.8 - Site Wide Reflected Cross Site Scripting (XSS) vulnerability Affected: through 5.4.8 |
| CVE-2025-2797 | 5.4 | Apr 4 | Woffice Core <= 5.4.21 - Cross-Site Request Forgery to User Registration Approval Affected: through 5.4.21 |
| CVE-2025-67566 | 5.3 | Dec 9 | WordPress Woffice Core plugin <= 5.4.30 - Broken Access Control vulnerability Affected: through 5.4.30 |
Showing 4