Wofficeio

12 CVEs across 2 Wofficeio products. Browse Wofficeio vulnerabilities, severities, and proof-of-concept exploits.

Wofficeio products with known CVEs

ProductCVEs
Woffice Core7
Woffice5
Wofficeio CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-27435Medium5.32026-07-01Missing Authorization vulnerability in WofficeIO Woffice allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Woffice…
CVE-2025-67919Medium6.52026-01-08Authorization Bypass Through User-Controlled Key vulnerability in WofficeIO Woffice Core woffice-core allows Exploiting Incorrectly Configured Access Control S…
CVE-2025-67918High7.12026-01-08Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WofficeIO Woffice woffice allows Reflected XSS.This issue…
CVE-2025-67566Medium5.32025-12-09Missing Authorization vulnerability in WofficeIO Woffice Core woffice-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a…
CVE-2025-7694Medium6.82025-08-02The Woffice Core plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the woffice_file_manager_delete() fu…
CVE-2025-2797Medium5.42025-04-04The Woffice Core plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.4.21. This is due to missing or incor…
CVE-2025-2780High8.82025-04-04The Woffice Core plugin for WordPress, used by the Woffice Theme, is vulnerable to arbitrary file uploads due to missing file type validation in the 'saveFeatu…
CVE-2024-43234Critical9.82024-12-16Authentication Bypass Using an Alternate Path or Channel vulnerability in WofficeIO Woffice woffice allows Authentication Bypass.This issue affects Woffice: fr…
CVE-2024-37470High8.22024-11-01Missing Authorization vulnerability in WofficeIO Woffice Core allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Woffice Core…
CVE-2024-43153Critical9.82024-08-13Incorrect Privilege Assignment vulnerability in WofficeIO Woffice woffice.This issue affects Woffice: from n/a through <= 5.4.10.
CVE-2024-37472High7.12024-07-04Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WofficeIO Woffice woffice.This issue affects Woffice: fro…
CVE-2024-37471High7.12024-07-04Cross Site Scripting (XSS) vulnerability in WofficeIO Woffice Core allows Reflected XSS.This issue affects Woffice Core: from n/a through 5.4.8.