Login Request a demo
WO
Product
Woffice
by Xtendify · last CVE Aug 2, 2025
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 4High 2Medium 3Low 0
Severity
All severities9Critical4High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Woffice to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-2798
9.8
1%
Apr 4
Woffice <= 5.4.21 - Authentication Bypass via Registration Role
Affected: before 5.4.22
CVE-2024-43234
9.8
1%
Dec 16
WordPress Woffice theme <= 5.4.14 - Unauthenticated Account Takeover vulnerability
Affected: before 5.4.15
CVE-2024-37470
9.8
1%
Nov 1
WordPress Woffice Core plugin <= 5.4.8 - Unauthenticated Broken Access Control vulnerability
Affected: before 5.4.9
CVE-2024-43153
9.8
1%
Aug 13
Incorrect Privilege Assignment vulnerability in WofficeIO Woffice woffice.This issue affects Woffice: from n/a through <= 5.4.10
Affected: before 5.4.12
CVE-2025-2780
8.8
1%
Apr 4
Woffice Core <= 5.4.21 - Authenticated (Subscriber+) Arbitrary File Upload
Affected: before 5.4.22
CVE-2025-7694
7.5
1%
Aug 2
Woffice Core <= 5.4.26 - Authenticated (Contributor+) Arbitrary File Deletion
Affected: before 5.4.27
CVE-2024-37472
6.1
0%
Jul 4
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WofficeIO Woffice woffice.This issue affects Woffice: from n/a through <=…
Affected: before 5.4.9
CVE-2024-37471
6.1
0%
Jul 4
Cross Site Scripting (XSS) vulnerability in WofficeIO Woffice Core allows Reflected XSS.This issue affects Woffice Core: from n/a through 5.4.8
Affected: before 5.4.9
CVE-2025-2797
5.4
0%
Apr 4
Woffice Core <= 5.4.21 - Cross-Site Request Forgery to User Registration Approval
Affected: before 5.4.22
Showing 9