WPO365 vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20241
3. 20251
4. 20265

Newest CVEs

• CVE-2026-122220

  WPO365 LOGIN before 45.2 SAML Replay Protection Bypass

  wpo365 · WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)

  Critical9.1
• CVE-2026-107759

  WPO365 | MICROSOFT 365 GRAPH MAILER <= 6.2 - Unauthenticated Stored Cross-Site Scripting via Email Subject via wp_mail

  wpo365 · WPO365 | MICROSOFT 365 GRAPH MAILER

  High7.2
• CVE-2026-104759

  WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) <= 44.1 - Unauthenticated Authentication Bypass via OIDC Nonce Replay via id_token Nonce Verification

  wpo365 · WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)

  High8.1
• CVE-2026-96765

  WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) <= 44.1 - Unauthenticated Stored Cross-Site Scripting via 'id_token' Parameter (iss / unique_name JWT claims)

  wpo365 · WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)

  High7.2
• CVE-2026-15212

  WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) <= 43.2 - Cross-Site Request Forgery to Privilege Escalation via Plugin Settings Update

  wpo365 · WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)

  High8.8
• CVE-2025-1488

  WPO365 | MICROSOFT 365 GRAPH MAILER <= 3.2 - Open Redirect via 'redirect_to' Parameter

  wpo365 · WPO365 | MICROSOFT 365 GRAPH MAILER

  Medium4.7
• CVE-2024-4706

  WordPress + Microsoft Office 365 / Azure AD | LOGIN <= 27.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via pintra Shortcode

  wpo365 · WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)

  Medium6.4
• CVE-2023-32119

  WordPress WPO365 | Mail Integration for Office 365 / Outlook Plugin <= 1.9.0 is vulnerable to Cross Site Scripting (XSS)

  WPO365 · WPO365 | Mail Integration for Office 365 / Outlook

  Medium5.8