Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: onOffice GmbH Clear all filters
TI-2025-22228 CVE-2025-30958 · GHSA-jwhw-x4j5-wcx9

WordPress onOffice for WP-Websites plugin <= 6.5.1 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in onOffice GmbH onOffice for WP-Websites onoffice-for-wp-websites allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects onOffice for WP-Websites:…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00363 Published 2025-06-06 No fix listed CWE-862
TI-2025-23225 CVE-2025-32127 · GHSA-g6wq-rr9q-jmfw

WordPress onOffice for WP-Websites plugin <= 5.7 - SQL Injection vulnerability

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in onOffice GmbH onOffice for WP-Websites onoffice-for-wp-websites allows SQL Injection.This issue affects onOffice for W…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00593 Published 2025-04-04 No fix listed CWE-89