Login Request a demo
WC
Product
Woffice Core
by WofficeIO · last CVE Jan 8, 2026
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 1High 2Medium 4Low 0
Severity
All severities7Critical1High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Woffice Core to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-37470
9.8
1%
Nov 1
WordPress Woffice Core plugin <= 5.4.8 - Unauthenticated Broken Access Control vulnerability
Affected: through 5.4.8
CVE-2025-2780
8.8
1%
Apr 4
Woffice Core <= 5.4.21 - Authenticated (Subscriber+) Arbitrary File Upload
Affected: through 5.4.21
CVE-2025-7694
7.5
1%
Aug 2
Woffice Core <= 5.4.26 - Authenticated (Contributor+) Arbitrary File Deletion
Affected: through 5.4.26
CVE-2025-67919
6.5
0%
Jan 8
WordPress Woffice Core plugin <= 5.4.30 - Insecure Direct Object References (IDOR) vulnerability
Affected: through 5.4.30
CVE-2024-37471
6.1
0%
Jul 4
WordPress Woffice Core plugin <= 5.4.8 - Site Wide Reflected Cross Site Scripting (XSS) vulnerability
Affected: through 5.4.8
CVE-2025-2797
5.4
0%
Apr 4
Woffice Core <= 5.4.21 - Cross-Site Request Forgery to User Registration Approval
Affected: through 5.4.21
CVE-2025-67566
5.3
0%
Dec 9
WordPress Woffice Core plugin <= 5.4.30 - Broken Access Control vulnerability
Affected: through 5.4.30
Showing 7