Medium 6.5
2026-01-08< 5.4.31
CVE-2025-67919
Minimum safe version
5.4.31
Update to 5.4.31 or later to address 7 fixable vulnerabilities
CVE-2025-67919
CVE-2025-67566
Woffice Core <= 5.4.26 - Authenticated (Contributor+) Arbitrary File Deletion
Woffice Core <= 5.4.21 - Cross-Site Request Forgery to User Registration Approval
Woffice Core <= 5.4.21 - Authenticated (Subscriber+) Arbitrary File Upload
CVE-2024-37470
CVE-2024-37471