WordPress Woffice Vulnerabilities

Wordpress Woffice vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

1 July 2026

Missing Authorization Vulnerability in WofficeIO Woffice Product
CVE-2026-27435
WordPressWoffice5.3MEDIUM

8 January 2026

Authorization Bypass Vulnerability in WofficeIO Woffice Core
CVE-2025-67919
WordPressWoffice Core6.5MEDIUM
Cross-Site Scripting Vulnerability in Woffice by WofficeIO
CVE-2025-67918
WordPressWoffice7.1HIGH

9 December 2025

Missing Authorization Vulnerability in WofficeIO's Woffice Core
CVE-2025-67566
WordPressWoffice Core5.3MEDIUM

2 August 2025

Arbitrary File Deletion Vulnerability in Woffice Core Plugin by WordPress
CVE-2025-7694
WordPressWoffice Core6.8MEDIUM

4 April 2025

16 December 2024

Authentication Bypass Vulnerability in Woffice by Envato Security Team
CVE-2024-43234
WordPressWoffice9.8CRITICAL

1 November 2024

Missing Authorization Vulnerability in Woffice Core Affects Functionality Not Properly Constrained by ACLs
CVE-2024-37470
WordPressWoffice Core8.2HIGH

13 August 2024

Woffice Privilege Escalation Vulnerability Affects All Versions From n/a to 5.4.10
CVE-2024-43153
WordPressWoffice9.8CRITICAL