CVE-2026-39747

Subscriber SQL Injection in Woffice = 5.4.35 versions...

CVE-2026-39747 WordPress Woffice theme <= 5.4.35 - SQL Injection vulnerability

Subscriber SQL Injection in Woffice = 5.4.35 versions...

CVE-2026-39747

The Woffice theme for WordPress (versions

CVE-2026-39747 WordPress Woffice theme <= 5.4.35 - SQL Injection vulnerability

Subscriber SQL Injection in Woffice = 5.4.35 versions...

EUVD-2026-93256

Subscriber SQL Injection in Woffice = 5.4.35 versions...

PT-2026-106421

Name of the Vulnerable Software and Affected Versions Woffice versions prior to 5.4.36 Description An SQL Injection issue exists in the subscriber component, allowing an attacker to interfere with the database queries. Recommendations Update to a version newer than 5.4.35...

CVE-2026-39747: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in Woffice = 5.4.35 versions...

WordPress Woffice theme <= 5.4.35 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Bonds in WordPress Theme Woffice versions = 5.4.35...

CVE-2026-27435

Missing Authorization vulnerability in WofficeIO Woffice allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Woffice: from n/a before 5.4.33...

CVE-2026-27435

WordPress Woffice theme versions before 5.4.33 are affected by a Missing Authorization vulnerability due to incorrectly configured access control. CVSSv3.1: 5.3 (Network, Low privileges, No user interaction). Impact: Integrity impact (LOW); others None. Affected: Woffice theme (WordPress)

CVE-2026-27435 WordPress Woffice theme < 5.4.33 - Broken Access Control vulnerability

Missing Authorization vulnerability in WofficeIO Woffice allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Woffice: from n/a before 5.4.33...

CVE-2026-27435 WordPress Woffice theme < 5.4.33 - Broken Access Control vulnerability

Missing Authorization vulnerability in WofficeIO Woffice allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Woffice: from n/a before 5.4.33...

CVE-2026-27435: Missing Authorization

Missing Authorization vulnerability in WofficeIO Woffice allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Woffice: from n/a before 5.4.33...

PT-2026-54727

Name of the Vulnerable Software and Affected Versions WofficeIO Woffice versions prior to 5.4.33 Description An issue exists where incorrectly configured access control security levels lead to missing authorization, allowing for potential exploitation. Recommendations Update WofficeIO Woffice to...

WordPress Woffice theme < 5.4.33 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Woffice versions 5.4.33...

CVE-2025-67919

Authorization Bypass Through User-Controlled Key vulnerability in WofficeIO Woffice Core woffice-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woffice Core: from n/a through = 5.4.30...

CVE-2025-67918

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WofficeIO Woffice woffice allows Reflected XSS.This issue affects Woffice: from n/a through = 5.4.30...

CVE-2025-67919

Authorization Bypass Through User-Controlled Key vulnerability in WofficeIO Woffice Core woffice-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woffice Core: from n/a through = 5.4.30...

CVE-2025-67918

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WofficeIO Woffice woffice allows Reflected XSS.This issue affects Woffice: from n/a through = 5.4.30...

CVE-2025-67919 WordPress Woffice Core plugin <= 5.4.30 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in WofficeIO Woffice Core woffice-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woffice Core: from n/a through = 5.4.30...