CVE-2025-67918: WordPress Woffice theme <= 5.4.30 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WofficeIO Woffice woffice allows Reflected XSS.This issue affects Woffice: from n/a through <= 5.4.30.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-67918?
The severity of CVE-2025-67918 is classified as high due to its potential for reflected cross-site scripting attacks.
How do I fix CVE-2025-67918?
To fix CVE-2025-67918, update Woffice to a version higher than 5.4.30 where the vulnerability has been patched.
What impact does CVE-2025-67918 have on users?
CVE-2025-67918 can allow attackers to execute arbitrary JavaScript in the context of a user's browser, compromising sensitive information.
Which versions of Woffice are affected by CVE-2025-67918?
Woffice versions from n/a through 5.4.30 are affected by CVE-2025-67918.
Is CVE-2025-67918 a common vulnerability?
Yes, reflected cross-site scripting vulnerabilities like CVE-2025-67918 are common in web applications and require prompt remediation.