wpo365-login

WordPress · Plugin

9 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
WPO365 \| SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 \| LOGIN) <= 45.1 - Authentication Bypass via SAML RelayCVE-2026-122220	wpo365-login	WordPress	Medium	Fix reported	2026-11-11
WPO365 \| SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 \| LOGIN) <= 44.1 - Unauthenticated Authentication Bypass via OIDC Nonce Replay via id_token Nonce VerificationCVE-2026-104759	wpo365-login	WordPress	High	Fix reported	2026-10-10
WPO365 \| SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 \| LOGIN) <= 44.1 - Unauthenticated Stored Cross-Site Scripting via 'id_token' Parameter (iss / unique_name JWT claims)CVE-2026-96765	wpo365-login	WordPress	High	Fix reported	2026-10-10
WPO365 \| SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 \| LOGIN) <= 44.1 - Missing AuthorizationCVE-2026-102915	wpo365-login	WordPress	Medium	Fix reported	2026-10-09
WPO365 \| SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 \| LOGIN) <= 43.2 - Cross-Site Request Forgery to Privilege Escalation via Plugin Settings UpdateCVE-2026-15212	wpo365-login	WordPress	High	Fix reported	2026-07-23
WPO365 <= 40.0 - Authenticated (Subscriber+) Server-Side Request ForgeryCVE-2025-67961	wpo365-login	WordPress	Medium	Fix reported	2026-01-28
WordPress + Microsoft Office 365 / Azure AD \| LOGIN <= 27.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via pintra ShortcodeCVE-2024-4706	wpo365-login	WordPress	Medium	Fix reported	2024-05-23
WordPress + Microsoft Office 365 / Azure AD \| LOGIN <= 15.3 - Stored Cross-Site ScriptingCVE-2021-43409	wpo365-login	WordPress	Medium	Fix reported	2024-01-22
WPO365 \| LOGIN <= 11.6 - Authentication BypassCVE-2020-26511	wpo365-login	WordPress	Critical	Fix reported	2024-01-22