Wpo365 vulnerabilities

Products

• | Seamless Wordpress + Microsoft Integration (wpo365 | Login) 5
• Wordpress \+ Azure Ad \/ Microsoft Office 365 2
• | Microsoft 365 Graph Mailer 2

Newest

• wpo365 | seamless wordpress + microsoft integration (wpo365 | login) WPO365 LOGIN before 45.2 SAML Replay Protection Bypass CVE-2026-122220 9.1 CriticalNovember 4, 2026
• wpo365 | microsoft 365 graph mailer WPO365 | MICROSOFT 365 GRAPH MAILER <= 6.2 - Unauthenticated Stored Cross-Site Scripting via Email Subject via wp_mail CVE-2026-107759 7.2 HighOctober 31, 2026
• wpo365 | seamless wordpress + microsoft integration (wpo365 | login) WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) <= 44.1 - Unauthenticated Authentication Bypass via OIDC Nonce Replay via id_token Nonce Verification CVE-2026-104759 8.1 HighOctober 10, 2026
• wpo365 | seamless wordpress + microsoft integration (wpo365 | login) WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) <= 44.1 - Unauthenticated Stored Cross-Site Scripting via 'id_token' Parameter (iss / unique_name JWT claims) CVE-2026-96765 7.2 HighOctober 10, 2026
• wpo365 | seamless wordpress + microsoft integration (wpo365 | login) WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) <= 43.2 - Cross-Site Request Forgery to Privilege Escalation via Plugin Settings Update CVE-2026-15212 8.8 HighJuly 23, 2026
• wpo365 microsoft 365 graph mailer, | microsoft 365 graph mailer +1 more WPO365 | MICROSOFT 365 GRAPH MAILER <= 3.2 - Open Redirect via 'redirect_to' Parameter CVE-2025-1488 4.7 MediumFebruary 24, 2025
• wpo365 | seamless wordpress + microsoft integration (wpo365 | login) WordPress + Microsoft Office 365 / Azure AD | LOGIN <= 27.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via pintra Shortcode CVE-2024-4706 6.4 MediumMay 23, 2024
• wpo365 | mail integration for office 365 / outlook, mail integration for office 365 \/ outlook +1 more WordPress WPO365 | Mail Integration for Office 365 / Outlook Plugin <= 1.9.0 is vulnerable to Cross Site Scripting (XSS) CVE-2023-32119 5.8 MediumAugust 23, 2023
• wpo365 wordpress + microsoft office 365 / azure ad | login, wordpress \+ azure ad \/ microsoft office 365 +1 more WPO365 | LOGIN - Wordpress Plugin Persistent Cross-Site Scripting CVE-2021-43409 9.3 CriticalNovember 19, 2021
• wpo365 wordpress \+ azure ad \/ microsoft office 365 The wpo365-login plugin before v11.7 for WordPress allows use of a symmetric algorithm to decrypt... CVE-2020-26511 7.5 HighOctober 2, 2020