Known Vulnerabilities for Box Office by Woocommerce
Listed below are 1 of the newest known vulnerabilities associated with "Box Office" by "Woocommerce".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-125390 json | Group-Office before 6.8.181, 25.0.116, and 26.0.58 contains an arbitrary local file read vulnerability in FolderController::a... | Not Provided | 2026-11-10 | 2026-11-09 |
| CVE-2026-125389 json | Intermesh Group-Office before 6.8.181, 25.0.116, and 26.0.58 contains a stored cross-site scripting vulnerability in the emai... | Not Provided | 2026-11-10 | 2026-11-09 |
| CVE-2026-125388 json | Intermesh Group-Office before 6.8.181, 25.0.116, and 26.0.58 contains a missing authorization vulnerability that allows authe... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-124916 json | PrestaShop contains an authenticated PHP code injection vulnerability in the back-office Performance debug-mode configuration... | Not Provided | 2026-11-09 | 2026-11-09 |
| CVE-2026-124500 json | A security flaw has been discovered in Fengoffice Feng Office up to 3.11.13.11/4.2.1.2. This impacts the function upload_docu... | Not Provided | 2026-11-09 | 2026-11-09 |
| CVE-2026-124499 json | A vulnerability was identified in Fengoffice Feng Office up to 3.11.13.11/4.2.1.2. This affects the function write_translatio... | Not Provided | 2026-11-09 | 2026-11-10 |
| CVE-2026-124233 json | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-124229 json | Deserialization of untrusted data in Microsoft Office Excel allows an unauthorized attacker to execute code with a physical a... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-124228 json | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office Outlook allows an authoriz... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-124227 json | Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | Not Provided | 2026-11-10 | 2026-11-10 |