WofficeIO Vulnerabilities and Affected Products

Open in search

Vulnerabilities associated with Woffice.

Products

Clear product

Showing 5 vulnerabilities on this page for Woffice

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

WordPress Woffice theme < 5.4.33 - Broken Access Control vulnerability

Missing Authorization vulnerability in WofficeIO Woffice allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Woffice: from n/a before 5.4.33.

CWE-862Jul 1, 2026
CVSS5.3v3.1EPSS0.171%PoCs0SignalsSTIX

WordPress Woffice theme <= 5.4.30 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WofficeIO Woffice woffice allows Reflected XSS.This issue affects Woffice: from n/a through <= 5.4.30.

CWE-79Jan 8, 2026
CVSS7.1v3.1EPSS0.187%PoCs0SignalsSTIX

WordPress Woffice theme <= 5.4.14 - Unauthenticated Account Takeover vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in WofficeIO Woffice woffice allows Authentication Bypass.This issue affects Woffice: from n/a through <= 5.4.14.

CWE-288Dec 16, 2024
CVSS9.8v3.1EPSS0.66%PoCs0SignalsSTIX

WordPress Woffice theme <= 5.4.10 - Unauthenticated Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in WofficeIO Woffice woffice.This issue affects Woffice: from n/a through <= 5.4.10.

CWE-266CWE-269Aug 13, 2024
CVSS9.8v3.1EPSS0.624%PoCs0SignalsSTIX

WordPress Woffice theme <= 5.4.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WofficeIO Woffice woffice.This issue affects Woffice: from n/a through <= 5.4.8.

CWE-79Jul 4, 2024
CVSS7.1v3.1EPSS0.333%PoCs0SignalsSTIX