Vulnerability index

Browse CVEs

11 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Woffice HIGH 7.5
CVE-2025-7694

The Woffice Core plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the woffice_file_manager_d…

Fix: 5.4.27+
Fix from $1,950 2025-08-02
Woffice CRITICAL 9.8
CVE-2025-2798

The Woffice CRM theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.21. This is due to a misconfigur…

Fix: 5.4.22+
Fix from $2,300 2025-04-04
Woffice MEDIUM 5.4
CVE-2025-2797

The Woffice Core plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.4.21. This is due to missin…

Fix: 5.4.22+
Fix from $1,600 2025-04-04
Woffice HIGH 8.8
CVE-2025-2780

The Woffice Core plugin for WordPress, used by the Woffice Theme, is vulnerable to arbitrary file uploads due to missing file type validation in the …

Fix: 5.4.22+
Fix from $1,950 2025-04-04
Woffice CRITICAL 9.8
CVE-2024-43234

Authentication Bypass Using an Alternate Path or Channel vulnerability in WofficeIO Woffice woffice allows Authentication Bypass.This issue affects W…

Fix: 5.4.15+
Fix from $2,300 2024-12-16
Woffice CRITICAL 9.8
CVE-2024-37470

Missing Authorization vulnerability in WofficeIO Woffice Core allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Woff…

Fix: 5.4.9+
Fix from $2,300 2024-11-01
Simple Calendar MEDIUM 6.1
CVE-2024-8549

The Simple Calendar – Google Calendar Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg wit…

Fix: 3.4.3+
Fix from $1,600 2024-09-25
Woffice CRITICAL 9.8
CVE-2024-43153

Incorrect Privilege Assignment vulnerability in WofficeIO Woffice woffice.This issue affects Woffice: from n/a through <= 5.4.10.

Fix: 5.4.12+
Fix from $2,300 2024-08-13
Woffice MEDIUM 6.1
CVE-2024-37471

Cross Site Scripting (XSS) vulnerability in WofficeIO Woffice Core allows Reflected XSS.This issue affects Woffice Core: from n/a through 5.4.8.

Fix: 5.4.9+
Fix from $1,600 2024-07-04
Woffice MEDIUM 6.1
CVE-2024-37472

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WofficeIO Woffice woffice.This issue affects Wo…

Fix: 5.4.9+
Fix from $1,600 2024-07-04
Simple Calendar HIGH 8.8
CVE-2023-46189

Cross-Site Request Forgery (CSRF) vulnerability in Simple Calendar – Google Calendar Plugin <= 3.2.5 versions.

Fix: 3.2.6+
Fix from $1,950 2023-10-25