Woffice CRM

Woffice CRM has 7 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; all 7 are fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 9.8 out of 10. Severity breakdown: 3 critical and 0 high. 2024 was the busiest year with 3 disclosures.

The most common weakness is Missing Authorization, behind 3 of the records (43%). Other recurring categories include Cross-Site Scripting, Improper Privilege Management.

Every one of the 7 issues recorded for Woffice CRM has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, most of them (4) reported by Rafie Muhammad.

Strategic Overview

Avg CVSSHigh

7.5/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Woffice CRM vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2025-2798

Woffice <= 5.4.21 - Authentication Bypass via Registration Role

Read the full analysis

Vulnerability Records

7 records


2026-06-29 00:00	Woffice CRM <= 5.4.32 - Missing Authorization Woffice CRM <= 5.4.32	`CVE-2026-27435`	5.3 Medium	João Pedro S Alcântara (Kinorth)	Yes
2026-01-05 00:00	Woffice <= 5.4.30 - Reflected Cross-Site Scripting Woffice CRM <= 5.4.30	`CVE-2025-67918`	6.1 Medium	Rafie Muhammad	Yes
2025-04-03 00:00	Woffice <= 5.4.21 - Authentication Bypass via Registration Role Woffice CRM <= 5.4.21	`CVE-2025-2798`	9.8 Critical	Foxyyy	Yes
2024-12-10 00:00	Woffice <= 5.4.14 - Unauthenticated Privilege Escalation Woffice CRM <= 5.4.14	`CVE-2024-43234`	9.8 Critical	Rafie Muhammad	Yes
2024-08-07 00:00	Woffice <= 5.4.10 - Unauthenticated Privilege Escalation Woffice CRM <= 5.4.10	`CVE-2024-43153`	9.8 Critical	Rafie Muhammad	Yes
2024-07-01 00:00	Woffice <= 5.4.8 - Reflected Cross-Site Scripting Woffice CRM <= 5.4.8	`CVE-2024-37472`	6.1 Medium	Rafie Muhammad	Yes
2021-08-26 00:00	Woffice CRM <= 4.0.1 - Authorization Bypass Woffice CRM <= 4.0.1	`N/A`	5.3 Medium	MaxBCM	Yes

Showing 1–7 of 7 reports