W
Woffice
Security Risk Profile
59
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 4 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 4, 2025 to present
4
Total CVEs
3
Critical+High
0
Exploited
3
Unpatched
Threat Assessment
Avg CVSS
7.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
3
Critical/High
Risk Level
59/100
medium
Severity Distribution
Critical
1High
2Medium
1Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
1
2
Malicious File Upload
1
3
CSRF
1
Most Affected Products
1. Xtendify Woffice Wordpress4
2. Woffice Core plugin for WordPress2
3. Woffice CRM theme for WordPress1
4. Woffice Core1
Recent Vulnerabilities
See more →CVE-2025-7694
CVSS 7.5EPSS 0%high
Woffice Core <= 5.4.26 - Authenticated (Contributor+) Arbitrary File Deletion
8/2/2025🔧 No Patch
CVE-2025-2798
CVSS 9.8critical
Woffice <= 5.4.21 - Authentication Bypass via Registration Role
4/4/2025🔧 No Patch
CVE-2025-2780
CVSS 8.8high
Woffice Core <= 5.4.21 - Authenticated (Subscriber+) Arbitrary File Upload
4/4/2025🔧 No Patch
CVE-2025-2797
CVSS 5.4medium
Woffice Core <= 5.4.21 - Cross-Site Request Forgery to User Registration Approval
4/4/2025🔧 No Patch
Monitor Woffice in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.