Vulnerabilities in WPO365
8 resultsCVE-2026-104759HIGHWPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) <= 44.1 - Unauthenticated Authentication Bypass via OIDC Nonce Replay via id_token Nonce VerificationEPSS 0.5%CVE-2023-32119MEDIUMWordPress WPO365 | Mail Integration for Office 365 / Outlook Plugin <= 1.9.0 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2026-122220CRITICALWPO365 LOGIN before 45.2 SAML Replay Protection BypassEPSS 0.3%CVE-2026-96765HIGHWPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) <= 44.1 - Unauthenticated Stored Cross-Site Scripting via 'id_token' Parameter (iss / unique_name JWT claims)EPSS 0.3%CVE-2025-1488MEDIUMWPO365 | MICROSOFT 365 GRAPH MAILER <= 3.2 - Open Redirect via 'redirect_to' ParameterEPSS 0.3%CVE-2024-4706MEDIUMWordPress + Microsoft Office 365 / Azure AD | LOGIN <= 27.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via pintra ShortcodeEPSS 0.3%CVE-2026-107759HIGHWPO365 | MICROSOFT 365 GRAPH MAILER <= 6.2 - Unauthenticated Stored Cross-Site Scripting via Email Subject via wp_mailEPSS 0.3%CVE-2026-15212HIGHWPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) <= 43.2 - Cross-Site Request Forgery to Privilege Escalation via Plugin Settings UpdateEPSS 0.2%