Skip to content
Noroxi

Woffice Core

woffice-core · plugin

Known security vulnerabilities for Woffice Core. Find out in seconds which version runs on your site with WP Lens.

4 known vulnerabilities

1 critical · latest Jan 8, 2026

Vulnerabilities

  • CVE-2024-37470

    WordPress Woffice Core plugin <= 5.4.8 - Unauthenticated Broken Access Control vulnerability

    Critical 9.8
  • CVE-2025-67919

    WordPress Woffice Core plugin <= 5.4.30 - Insecure Direct Object References (IDOR) vulnerability

    Medium 6.5
  • CVE-2024-37471

    WordPress Woffice Core plugin <= 5.4.8 - Site Wide Reflected Cross Site Scripting (XSS) vulnerability

    Medium 6.1
  • CVE-2025-67566

    WordPress Woffice Core plugin <= 5.4.30 - Broken Access Control vulnerability

    Medium 5.3

← Back to directory