CVE-2025-2798

creationtimestamp| type| source ---|---|--- 2025-04-04 14:40:12+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llynilidiy2p 2025-04-04 15:37:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10481 2025-04-04 15:48:17+00:00| seen|...

CVE-2025-2798 Woffice <= 5.4.21 - Authentication Bypass via Registration Role

The Woffice CRM theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.21. This is due to a misconfiguration of excluded roles during registration. This makes it possible for unauthenticated attackers to register with an Administrator role if a custom...

CVE-2025-2798

The CVE-2025-2798 entry concerns the Woffice CRM theme for WordPress. Affected: all versions up to and including 5.4.21. Root cause: misconfiguration of excluded roles during user registration in the Woffice CRM theme, allowing unauthenticated attackers to register with Administrator privileges w...