Wpo365 vulnerabilities
We track 5 vulnerabilities in Wpo365 products across 2 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2026.
Latest Wpo365 vulnerabilities
- 7.4 High severity
WPO365 | SEAMLESS WORDPRESS + MICROSOFT…: Authentication Bypass by Capture-replay
WPO365 | LOGIN (wpo365-login) plugin before version 45.2 contains an authentication bypass by capture-replay vulnerability caused by a non-functional anti-replay check in Saml2_Service::check_message_id(), which never persists processed SAML message IDs to the
- 7.2 High severity
WPO365 | MICROSOFT 365 GRAPH MAILER: Improper Neutralization of Input During Web Page Generation
The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Subject (via wp_mail/PHPMailer, e.g. CF7 your-subject)' parameter in all versions up to, and including, 6.2 due to insufficient input sanitizatio
- 7.2 High severity
WPO365 | SEAMLESS WORDPRESS + MICROSOFT…: Improper Neutralization of Input During Web Page Generation
The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id_token' parameter in all versions up to, and including, 44.1 due to insufficient input sanitization and output
- 8.1 High severity
WPO365 | SEAMLESS WORDPRESS + MICROSOFT…: Improper Authentication
The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Authentication Bypass via OIDC Nonce Replay in all versions up to, and including, 44.1 This is due to `Id_Token_Service_Deprecated::process_openidcon
- 8.8 High severity
WPO365 | SEAMLESS WORDPRESS + MICROSOFT…: Cross-Site Request Forgery
The WPO365 | Login plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 43.2. This is due to the Ajax_Service::verify_ajax_request() helper gating its wp_verify_nonce() call behind the boolean option 'enable_nonce_