CVE-2024-43234: WordPress Woffice theme <= 5.4.14 - Unauthenticated Account Takeover vulnerability
Published Dec 16, 2024
·Updated
Authentication Bypass Using an Alternate Path or Channel vulnerability in WofficeIO Woffice woffice allows Authentication Bypass.This issue affects Woffice: from n/a through <= 5.4.14.
Affected Software
3 affected components
WofficeIO Woffice<=5.4.14
WordPress Woffice<=5.4.14
Xtendify Woffice Wordpress<5.4.15
Remediation
Information
Update the WordPress Woffice wordpress theme to the latest available version (at least 5.4.15).
Event History
Dec 16, 2024
CVE Published
via MITRE·03:36 PM
Data Sourced
via MITRE·03:36 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-43234?
CVE-2024-43234 is classified as a high severity vulnerability due to its potential for authentication bypass.
2
How do I fix CVE-2024-43234?
To fix CVE-2024-43234, update Woffice to the latest version beyond 5.4.14 that addresses this vulnerability.
3
What versions of Woffice are affected by CVE-2024-43234?
CVE-2024-43234 affects all versions of Woffice from n/a up to and including 5.4.14.
4
What is the nature of the vulnerability CVE-2024-43234?
CVE-2024-43234 is an authentication bypass vulnerability that allows unauthorized access through alternate paths or channels.
5
Is CVE-2024-43234 specific to Woffice or does it affect WordPress as well?
CVE-2024-43234 affects Woffice in the context of WordPress, specifically under the Woffice theme.