CVE-2024-43234: Xtendify Woffice

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Authentication Bypass Using an Alternate Path or Channel vulnerability in WofficeIO Woffice woffice allows Authentication Bypass.This issue affects Woffice: from n/a through <= 5.4.14.

Affected products

• Xtendify Woffice: before 5.4.15 (fixed in 5.4.15)

Published 2024-12-16. Last modified 2026-06-17.