Read the docs

onOffice GmbH

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

onOffice GmbH records in CISA KEV

No onOffice GmbH vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-23225 CVE-2025-32127 · GHSA-g6wq-rr9q-jmfw

WordPress onOffice for WP-Websites plugin <= 5.7 - SQL Injection vulnerability

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in onOffice GmbH onOffice for WP-Websites onoffice-for-wp-websites allows SQL Injection.This issue affects onOffice for W…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00593 Published 2025-04-04 No fix listed CWE-89
TI-2025-22228 CVE-2025-30958 · GHSA-jwhw-x4j5-wcx9

WordPress onOffice for WP-Websites plugin <= 6.5.1 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in onOffice GmbH onOffice for WP-Websites onoffice-for-wp-websites allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects onOffice for WP-Websites:…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00363 Published 2025-06-06 No fix listed CWE-862
Open these records in search →