WofficeIO Woffice vulnerabilities

CVEs per yearBy the year they were published

1. 20243
2. 20263

Newest CVEs

• CVE-2026-39747

  WordPress Woffice theme < 5.4.43 - SQL Injection vulnerability

  WofficeIO · Woffice

  High8.5
• CVE-2026-27435

  WordPress Woffice theme < 5.4.33 - Broken Access Control vulnerability

  WofficeIO · Woffice

  Medium5.3
• CVE-2025-67918

  WordPress Woffice theme <= 5.4.30 - Cross Site Scripting (XSS) vulnerability

  WofficeIO · Woffice

  High7.1
• CVE-2024-43234

  WordPress Woffice theme <= 5.4.14 - Unauthenticated Account Takeover vulnerability

  WofficeIO · Woffice

  Critical9.8
• CVE-2024-43153

  WordPress Woffice theme <= 5.4.10 - Unauthenticated Privilege Escalation vulnerability

  WofficeIO · Woffice

  Critical9.8
• CVE-2024-37472

  WordPress Woffice theme <= 5.4.8 - Reflected Cross Site Scripting (XSS) vulnerability

  WofficeIO · Woffice

  High7.1