Skip to content
OpenAdvisories

Vendor

onOffice

2 known vulnerabilities.

Products

onOffice for WP-Websites 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2025-32127

    WordPress onOffice for WP-Websites plugin <= 5.7 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in onOffice GmbH onOffice for WP-Websites onoffice-for-wp-websites allows SQL Injection.This issue affects onOffice for WP-Websites: from n/a through <= 5.7.

    onOffice onOffice for WP-Websites