onOffice for WP-Websites

onOffice for WP-Websites has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 3 are fixed as of September 2026. Their average CVSS score is 4.7, and the most serious one scores 4.9 out of 10. 2025 was the busiest year with 3 disclosures.

The most common weakness is SQL Injection, behind 2 of the records (67%). Other recurring categories include Missing Authorization.

Every one of the 3 issues recorded for onOffice for WP-Websites has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. onOffice for WP-Websites is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
4.7/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all onOffice for WP-Websites vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.9CVE-2025-10045

onOffice for WP-Websites <= 6.5.1 - Authenticated (Editor+) SQL Injection

Read the full analysis

Vulnerability Records

3 records
onOffice for WP-Websites banner
Latestv6.14

onOffice for WP-Websites

onOffice GmbH

Author

onOffice GmbH

2.0(4)
40/100
Last Updated
2026-05-21 (4mo ago)
Active Installs
1,000+
Downloads
41,983
Requires WP
6.1+
Requires PHP
8.2+
Tested up to
WP 6.9.7
Created
2019-10-14 (7y ago)

Integrate real estates, contact forms and contact persons from the onOffice Software into your website. Thanks to shortcodes, the plugin is compatible with every WordPress theme. The plugin includes three modules: real estates addresses forms Using a short code, you bring real estates, addresses or forms to your website – you are as flexible in design as you are used to from onOffice. The user-friendly plugin enables a quick link between onOffice and your WordPress page: Present real estate and your team on the website and generate leads via forms. You stay in control and are 100% flexible. You can find tutorials, documentation and support on our documentation website. Real estate Create lists, design the real estate presentation and offer synopsis for downloading with a few easy steps. Publication: One click in the software is enough to publish the property on your WordPress website. List view: Present your properties in clear lists. It is entirely up to you which properties are represented. The lists can be inserted anywhere on the website using short codes. Detailed view: Comfortably structure the detail view with checkboxes and drag & drop and easily determine which information is displayed. Addresses The website is your business card on the internet. Create trust with a professional self-presentation. Team presentation: The address module accesses the data of the employees. The address display is ideal for presenting the team. Forms Simplify data maintenance: The information from forms is automatically transmitted to onOffice by the plugin. Contact: Classic contact form in which the user enters his message and contact information. Interested parties: Proactively serve prospective customers! The prospective customer states the contact data and their search desire. Address and search criteria are created directly in onOffice and provided with suitable offers. Owner: Acquire new orders with your website! In addition to the contact details, the owner provides information about the property. Address and property can be processed immediately in onOffice. Search for interested parties: Convince potential sellers! Show that you have suitable prospects in your inventory. The interested parties are displayed together with the search criteria (but without personal data). Further features The plugin offers further practical functions with which you can further professionalize your web presence. User-friendly watch list or favorites function Two map types: OpenStreetMap or Google Maps Show all linked media per address / property Arbitrary section Note that we cannot guarantee compatibility with all other plugins and themes. While it works well with most, if you encounter issues that we cannot reproduce, feel free to open a PR in our repository. If we understand the change and can test the functionality, we will be happy to include your fix. Development Development takes place in our Github repository. Legal onOffice Terms and Conditions: https://en.onoffice.com/terms-and-conditions.xhtml

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C