WO
Vendor
WofficeIO
13
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-39747 | WO Woffice WofficeIO | 8.5 | Oct 6 | WordPress Woffice theme <= 5.4.35 - SQL Injection vulnerability |
| CVE-2026-27435 | WO Woffice WofficeIO | 5.3 | Jul 1 | WordPress Woffice theme < 5.4.33 - Broken Access Control vulnerability |
| CVE-2025-67919 | WC Woffice Core WofficeIO | 6.5 | Jan 8 | WordPress Woffice Core plugin <= 5.4.30 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2025-67918 | WO Woffice WofficeIO | 7.1 | Jan 8 | WordPress Woffice theme <= 5.4.30 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-67566 | WC Woffice Core WofficeIO | 5.3 | Dec 9 | WordPress Woffice Core plugin <= 5.4.30 - Broken Access Control vulnerability |
| CVE-2025-7694 | WC Woffice Core WofficeIO | 7.5 | Aug 2 | Woffice Core <= 5.4.26 - Authenticated (Contributor+) Arbitrary File Deletion |
| CVE-2025-2780 | WC Woffice Core WofficeIO | 8.8 | Apr 4 | Woffice Core <= 5.4.21 - Authenticated (Subscriber+) Arbitrary File Upload |
| CVE-2025-2797 | WC Woffice Core WofficeIO | 5.4 | Apr 4 | Woffice Core <= 5.4.21 - Cross-Site Request Forgery to User Registration Approval |
| CVE-2024-43234 | WO Woffice WofficeIO | 9.8 | Dec 16 | WordPress Woffice theme <= 5.4.14 - Unauthenticated Account Takeover vulnerability |
| CVE-2024-37470 | WC Woffice Core WofficeIO | 9.8 | Nov 1 | WordPress Woffice Core plugin <= 5.4.8 - Unauthenticated Broken Access Control vulnerability |
| CVE-2024-43153 | WO Woffice WofficeIO | 9.8 | Aug 13 | WordPress Woffice theme <= 5.4.10 - Unauthenticated Privilege Escalation vulnerability |
| CVE-2024-37471 | WC Woffice Core WofficeIO | 6.1 | Jul 4 | WordPress Woffice Core plugin <= 5.4.8 - Site Wide Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2024-37472 | WO Woffice WofficeIO | 6.1 | Jul 4 | WordPress Woffice theme <= 5.4.8 - Reflected Cross Site Scripting (XSS) vulnerability |