How many WofficeIO Woffice CVEs are in CISA KEV?

None of WofficeIO Woffice's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of WofficeIO Woffice are affected?

19 distinct WofficeIO Woffice versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in WofficeIO Woffice CVEs?

WofficeIO Woffice's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-266 (Incorrect Privilege Assignment), CWE-288 (Authentication Bypass Using an Alternate Path or Channel), CWE-862 (Missing Authorization).

How many critical WofficeIO Woffice vulnerabilities are there?

WofficeIO Woffice has 2 critical and 2 high-severity CVEs.

What is the average severity of WofficeIO Woffice CVEs?

The average CVSS base score across WofficeIO Woffice's scored CVEs is 7.8.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

WofficeIO

5 CVEs

WofficeIO Woffice Vulnerabilities

Name: WofficeIO Woffice vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Woffice by WofficeIO.

5

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.8

Avg CVSS

2024–2026

Last updated July 1, 2026

Overview

WofficeIO Woffice has 5 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting WofficeIO Woffice, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of WofficeIO Woffice's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High2

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of WofficeIO Woffice's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No WofficeIO Woffice CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every WofficeIO Woffice version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 5.4.331 CVE
<= 5.4.101 CVE
<= 5.4.141 CVE
<= 5.4.301 CVE
<= 5.4.81 CVE
>= 5.4.121 CVE
>= 5.4.151 CVE
>= 5.4.311 CVE
>= 5.4.331 CVE
>= 5.4.91 CVE

Fixed in

> 5.4.101 CVE
> 5.4.141 CVE
> 5.4.301 CVE
> 5.4.81 CVE
5.4.121 CVE
5.4.151 CVE
5.4.311 CVE
5.4.331 CVE
5.4.91 CVE

Find a version

5 CVEs

Sort

WordPress Woffice theme < 5.4.33 - Broken Access Control vulnerability
CVE-2026-27435
Patch
CWE-862
Medium · CVSS 5.3
EPSS 0.2% (7th pct)2026-07-01
WordPress Woffice theme <= 5.4.30 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67918
Patch
CWE-79
High · CVSS 7.1
EPSS 0.2% (8th pct)2026-01-08
WordPress Woffice theme <= 5.4.14 - Unauthenticated Account Takeover vulnerability
CVE-2024-43234
Patch
CWE-288
Critical · CVSS 9.8
EPSS 0.7% (48th pct)2024-12-16
WordPress Woffice theme <= 5.4.10 - Unauthenticated Privilege Escalation vulnerability
CVE-2024-43153
Patch
CWE-266
Critical · CVSS 9.8
EPSS 0.6% (46th pct)2024-08-13
WordPress Woffice theme <= 5.4.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-37472
Patch
CWE-79
High · CVSS 7.1
EPSS 0.3% (26th pct)2024-07-04

Common weakness types

The CWE weakness categories most often found in WofficeIO Woffice CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many WofficeIO Woffice CVEs were published each year.

2024

3

2026

2

Other WofficeIO products

Browse vulnerabilities for other products by WofficeIO.

Woffice Core7 CVEs

All WofficeIO vulnerabilities

Frequently asked questions

Common questions about WofficeIO Woffice vulnerabilities.

How many CVEs does WofficeIO Woffice have?: WofficeIO Woffice has 5 published CVE records since 2024.
How many WofficeIO Woffice CVEs are in CISA KEV?: None of WofficeIO Woffice's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for WofficeIO Woffice vulnerabilities?: No WofficeIO Woffice CVEs currently have a tracked public exploit in this dataset.
Which versions of WofficeIO Woffice are affected?: 19 distinct WofficeIO Woffice versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in WofficeIO Woffice CVEs?: WofficeIO Woffice's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-266 (Incorrect Privilege Assignment), CWE-288 (Authentication Bypass Using an Alternate Path or Channel), CWE-862 (Missing Authorization).
How many critical WofficeIO Woffice vulnerabilities are there?: WofficeIO Woffice has 2 critical and 2 high-severity CVEs.
What is the average severity of WofficeIO Woffice CVEs?: The average CVSS base score across WofficeIO Woffice's scored CVEs is 7.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track WofficeIO Woffice vulnerabilities

Monitor new WofficeIO Woffice vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing