WPO365

Products

Product	CVEs	Exploited	Latest
WPO365 \| SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 \| LOGIN)	5	–	Nov 4, 2026
WPO365 \| MICROSOFT 365 GRAPH MAILER	2	–	Oct 31, 2026
WPO365 \| Mail Integration for Office 365 / Outlook	1	–	Aug 23, 2023

CVE-2026-122220 High 7.4 WPO365 LOGIN before 45.2 SAML Replay Protection Bypass 0.3%
CVE-2026-107759 High 7.2 WPO365 | MICROSOFT 365 GRAPH MAILER <= 6.2 - Unauthenticated Stored Cross-Site Scripting via Email Subject via wp_mail 0.3%
CVE-2026-104759 High 8.1 WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) <= 44.1 - Unauthenticated Authentication Bypass via OIDC Nonce Replay via id_token Nonce Verification 0.5%
CVE-2026-96765 High 7.2 WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) <= 44.1 - Unauthenticated Stored Cross-Site Scripting via 'id_token' Parameter (iss / unique_name JWT claims) 0.3%
CVE-2026-15212 High 8.8 WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) <= 43.2 - Cross-Site Request Forgery to Privilege Escalation via Plugin Settings Update 0.2%
CVE-2025-1488 Medium 4.7 WPO365 | MICROSOFT 365 GRAPH MAILER <= 3.2 - Open Redirect via 'redirect_to' Parameter 0.3%
CVE-2024-4706 Medium 6.4 WordPress + Microsoft Office 365 / Azure AD | LOGIN <= 27.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via pintra Shortcode 0.3%
CVE-2023-32119 Medium 5.8 WordPress WPO365 | Mail Integration for Office 365 / Outlook Plugin <= 1.9.0 is vulnerable to Cross Site Scripting (XSS) 0.3%