Skip to contentWofficeio Woffice vulnerabilities
- wofficeio wofficeWordPress Woffice theme < 5.4.43 - SQL Injection vulnerabilityCVE-2026-397478.5 High
- wofficeio wofficeWordPress Woffice theme < 5.4.33 - Broken Access Control vulnerabilityCVE-2026-274355.3 Medium
- wofficeio woffice coreWordPress Woffice Core plugin <= 5.4.30 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2025-679196.5 Medium
- wofficeio wofficeWordPress Woffice theme <= 5.4.30 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-679187.1 High
- wofficeio woffice coreWordPress Woffice Core plugin <= 5.4.30 - Broken Access Control vulnerabilityCVE-2025-675665.3 Medium
- wofficeio woffice core, xtendify woffice +1 moreWoffice Core <= 5.4.26 - Authenticated (Contributor+) Arbitrary File DeletionCVE-2025-76946.8 Medium
- wofficeio woffice core, xtendify woffice +1 moreWoffice Core <= 5.4.21 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2025-27808.8 High
- wofficeio woffice core, xtendify woffice +1 moreWoffice Core <= 5.4.21 - Cross-Site Request Forgery to User Registration ApprovalCVE-2025-27975.4 Medium
- wofficeio wofficeWordPress Woffice theme <= 5.4.14 - Unauthenticated Account Takeover vulnerabilityCVE-2024-432349.8 Critical
- wofficeio woffice core, xtendify woffice +1 moreWordPress Woffice Core plugin <= 5.4.8 - Unauthenticated Broken Access Control vulnerabilityCVE-2024-374708.2 High
- wofficeio wofficeWordPress Woffice theme <= 5.4.10 - Unauthenticated Privilege Escalation vulnerabilityCVE-2024-431539.8 Critical
- wofficeio woffice core, xtendify woffice +1 moreWordPress Woffice Core plugin <= 5.4.8 - Site Wide Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-374717.1 High
- wofficeio wofficeWordPress Woffice theme <= 5.4.8 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-374727.1 High