Skip to contentWofficeio Woffice Core vulnerabilities
- wofficeio woffice coreWordPress Woffice Core plugin <= 5.4.30 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2025-679196.5 Medium
- wofficeio woffice coreWordPress Woffice Core plugin <= 5.4.30 - Broken Access Control vulnerabilityCVE-2025-675665.3 Medium
- wofficeio woffice core, xtendify woffice +1 moreWoffice Core <= 5.4.26 - Authenticated (Contributor+) Arbitrary File DeletionCVE-2025-76946.8 Medium
- wofficeio woffice core, xtendify woffice +1 moreWoffice Core <= 5.4.21 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2025-27808.8 High
- wofficeio woffice core, xtendify woffice +1 moreWoffice Core <= 5.4.21 - Cross-Site Request Forgery to User Registration ApprovalCVE-2025-27975.4 Medium
- wofficeio woffice core, xtendify woffice +1 moreWordPress Woffice Core plugin <= 5.4.8 - Unauthenticated Broken Access Control vulnerabilityCVE-2024-374708.2 High
- wofficeio woffice core, xtendify woffice +1 moreWordPress Woffice Core plugin <= 5.4.8 - Site Wide Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-374717.1 High