Wpo365 Wpo365 | Seamless WordPress + Microsoft Integration (Wpo365 | Login)
5 CVEs affecting Wpo365 Wpo365 | Seamless WordPress + Microsoft Integration (Wpo365 | Login). Latest disclosed: 2026-11-04. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-15212 | High | 8.8 | 2026-07-23 | The WPO365 | Login plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 43.2. This is due to the Ajax_Service::ve… |
CVE-2026-104759 | High | 8.1 | 2026-10-10 | The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Authentication Bypass via OIDC Nonce Replay in a… |
CVE-2026-122220 | High | 7.4 | 2026-11-04 | WPO365 | LOGIN (wpo365-login) plugin before version 45.2 contains an authentication bypass by capture-replay vulnerability caused by a non-functional anti-repl… |
CVE-2026-96765 | High | 7.2 | 2026-10-10 | The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id_token' p… |
CVE-2024-4706 | Medium | 6.4 | 2024-05-23 | The WordPress + Microsoft Office 365 / Azure AD | LOGIN plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pintra' shortcode i… |