WofficeIO

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

WofficeIO records in CISA KEV

No WofficeIO vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Woffice 9 records MEDIUM Simple Calendar 2 records LOW Eonet Manual User Approve 1 record LOW

Records

2 records in Simple Calendar · all components

TI-2023-24816 CVE-2023-46189 · GHSA-qcp6-r6j2-hx5r

WordPress Google Calendar Events Plugin <= 3.2.5 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Simple Calendar – Google Calendar Plugin <= 3.2.5 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00345 Published 2023-10-24 No fix listed CWE-352

TI-2024-07925 CVE-2024-8549 · GHSA-3hq4-wjf7-pw99

Simple Calendar – Google Calendar Plugin <= 3.4.2 - Reflected Cross-Site Scripting

LOW 28

The Simple Calendar – Google Calendar Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and includi…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00491 Published 2024-09-25 No fix listed CWE-79

Open these records in search →

Critical	4
High	7
Medium	6
Low	0
No CVSS	0