Woffice

woffice

Vulnerabilities:

6

Last Updated:

March 2, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2026-01-05
Title
Woffice < 5.4.31 - Reflected Cross-Site Scripting
Fixed in
Fixed in 5.4.31
CVSS
6.1 (medium)
Published
2025-04-03
Title
Woffice < 5.4.22 - Authentication Bypass via Registration Role
Fixed in
Fixed in 5.4.22
CVSS
9.8 (critical)
Published
2024-12-10
Title
Woffice < 5.4.15 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 5.4.15
CVSS
9.8 (critical)
Published
2024-08-07
Title
Woffice < 5.4.12 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 5.4.12
CVSS
9.8 (critical)
Published
2024-07-01
Title
Woffice < 5.4.9 - Reflected Cross-Site Scripting
Fixed in
Fixed in 5.4.9
CVSS
6.1 (medium)
Published
2021-08-26
Title
Woffice < 4.0.2 - Unauthenticated Disclosure of Notification Titles
Fixed in
Fixed in 4.0.2
CVSS
4.3 (medium)