Skip to content
OpenAdvisories

Vendor

XTENDIFY

1 known vulnerabilities.

Products

Woffice CRM 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-2798

    Woffice <= 5.4.21 - Authentication Bypass via Registration Role

    The Woffice CRM theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.21. This is due to a misconfiguration of excluded roles during registration. This makes it possible for unauthenticated attackers to register …

    XTENDIFY Woffice CRM Web / CMS