CVE-2024-34528: Wordopsproject Wordops

High severity, CVSS 7.7. EPSS: 0.2% chance of exploitation in the next 30 days.

WordOps through 3.20.0 has a wo/cli/plugins/stack_pref.py TOCTOU race condition because the conf_path os.open does not use a mode parameter during file creation.

Affected products

• Wordopsproject Wordops: up to and including 3.20.0

Published 2024-05-06. Last modified 2026-06-17.