Browse CVEs

HIGH 7.5 CVE-2025-7694 The Woffice Core plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the woffice_file_manager_d… Woffice 5.4.27+ Fix from $1,9502025-08-02 CRITICAL 9.8 CVE-2025-2798 The Woffice CRM theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.21. This is due to a misconfigur… Woffice 5.4.22+ Fix from $2,3002025-04-04 MEDIUM 5.4 CVE-2025-2797 The Woffice Core plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.4.21. This is due to missin… Woffice 5.4.22+ Fix from $1,6002025-04-04 HIGH 8.8 CVE-2025-2780 The Woffice Core plugin for WordPress, used by the Woffice Theme, is vulnerable to arbitrary file uploads due to missing file type validation in the … Woffice 5.4.22+ Fix from $1,9502025-04-04 CRITICAL 9.8 CVE-2024-43234 Authentication Bypass Using an Alternate Path or Channel vulnerability in WofficeIO Woffice woffice allows Authentication Bypass.This issue affects W… Woffice 5.4.15+ Fix from $2,3002024-12-16 CRITICAL 9.8 CVE-2024-37470 Missing Authorization vulnerability in WofficeIO Woffice Core allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Woff… Woffice 5.4.9+ Fix from $2,3002024-11-01 MEDIUM 6.1 CVE-2024-8549 The Simple Calendar – Google Calendar Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg wit… Simple Calendar 3.4.3+ Fix from $1,6002024-09-25 CRITICAL 9.8 CVE-2024-43153 Incorrect Privilege Assignment vulnerability in WofficeIO Woffice woffice.This issue affects Woffice: from n/a through <= 5.4.10. Woffice 5.4.12+ Fix from $2,3002024-08-13 MEDIUM 6.1 CVE-2024-37471 Cross Site Scripting (XSS) vulnerability in WofficeIO Woffice Core allows Reflected XSS.This issue affects Woffice Core: from n/a through 5.4.8. Woffice 5.4.9+ Fix from $1,6002024-07-04 MEDIUM 6.1 CVE-2024-37472 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WofficeIO Woffice woffice.This issue affects Wo… Woffice 5.4.9+ Fix from $1,6002024-07-04 HIGH 8.8 CVE-2023-46189 Cross-Site Request Forgery (CSRF) vulnerability in Simple Calendar – Google Calendar Plugin <= 3.2.5 versions. Simple Calendar 3.2.6+ Fix from $1,9502023-10-25