Vulnerabilidades do WofficeIO Woffice

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam WofficeIO Woffice: 3 registro(s), com versões afetadas e correções.

CVE-2026-39747 Alta · 8.5 CWE-89 06/10/2026

WordPress Woffice theme <= 5.4.35 - SQL Injection vulnerability

Subscriber SQL Injection in Woffice <= 5.4.35 versions.

CVE-2026-27435 Média · 5.3 CWE-862 01/07/2026

WordPress Woffice theme < 5.4.33 - Broken Access Control vulnerability

Missing Authorization vulnerability in WofficeIO Woffice allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Woffice: from n/a before 5.4.33.

CVE-2025-67918 Alta · 7.1 CWE-79 08/01/2026

WordPress Woffice theme <= 5.4.30 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WofficeIO Woffice woffice allows Reflected XSS.This issue affects Woffice: from n/a through <= 5.4.30.