wps office vulnerabilities and fixes

Recent CVEs affecting wps office, with upgrade or downgrade steps. 3 tracked.

Also searched as: wpsoffice.

wps office has 3 tracked vulnerabilities, 0 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 2. Most recent: 2025-05-14. Highest priority: CVE-2024-7262 (score 74/100).

• CVE-2024-7263 HIGH 7.8 UPGRADE Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to
• CVE-2024-7262 HIGH 7.8 EXPLOITED UPGRADE Kingsoft WPS Office Path Traversal Vulnerability
• CVE-2024-57096 MEDIUM 5.5 MITIGATE An issue in wps office before v.19302 allows a local attacker to obtain sensitive information via a crafted fi

FAQ

How do I fix wps office vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is wps office being exploited right now?

Yes: 1 wps office CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.

Which wps office CVE should I patch first?

CVE-2024-7262 currently ranks highest (74/100): Kingsoft WPS Office Path Traversal Vulnerability.

RSS feed for wps office · ← Back to latest CVEs