Xtendify Woffice vulnerabilities

• wofficeio woffice core, xtendify woffice +1 more Woffice Core <= 5.4.26 - Authenticated (Contributor+) Arbitrary File Deletion CVE-2025-7694 6.8 MediumAugust 2, 2025
• xtendify woffice, woffice crm +1 more Woffice <= 5.4.21 - Authentication Bypass via Registration Role CVE-2025-2798 9.8 CriticalApril 4, 2025
• wofficeio woffice core, xtendify woffice +1 more Woffice Core <= 5.4.21 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2025-2780 8.8 HighApril 4, 2025
• wofficeio woffice core, xtendify woffice +1 more Woffice Core <= 5.4.21 - Cross-Site Request Forgery to User Registration Approval CVE-2025-2797 5.4 MediumApril 4, 2025
• wofficeio woffice WordPress Woffice theme <= 5.4.14 - Unauthenticated Account Takeover vulnerability CVE-2024-43234 9.8 CriticalDecember 16, 2024
• wofficeio woffice core, xtendify woffice +1 more WordPress Woffice Core plugin <= 5.4.8 - Unauthenticated Broken Access Control vulnerability CVE-2024-37470 8.2 HighNovember 1, 2024
• wofficeio woffice WordPress Woffice theme <= 5.4.10 - Unauthenticated Privilege Escalation vulnerability CVE-2024-43153 9.8 CriticalAugust 13, 2024
• wofficeio woffice core, xtendify woffice +1 more WordPress Woffice Core plugin <= 5.4.8 - Site Wide Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-37471 7.1 HighJuly 4, 2024
• wofficeio woffice WordPress Woffice theme <= 5.4.8 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-37472 7.1 HighJuly 4, 2024