PT-2025-49940 · Wofficeio · Woffice Core

Rafie Muhammad · Published 2025-12-09 · Updated 2025-12-15 · CVE-2025-67566

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions WofficeIO Woffice Core versions through 5.4.30

Description An authorization issue exists in WofficeIO Woffice Core, specifically related to incorrectly configured access control security levels. This allows for potential exploitation of the system.

Recommendations Update WofficeIO Woffice Core to a version later than 5.4.30.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-67566

Affected Products

Woffice Core

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-67566 · Security Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/woffice-core/vulnerability/wordpress-woffice-core-plugin-5-4-30-broken-access-control-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2000617530784690469 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/woffice-core/vulnerability/wordpress-woffice-core-plugin-5-4-30-broken-access-control-vulnerability?_s_id=cve · Note