Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-05
Wpo365 Login - Security Vulnerability (CVE-2026-122220)
WPO365 | LOGIN (wpo365-login) plugin before version 45.2 contains an authentication bypass by capture-replay vulnerability caused by a non-functional anti-replay check in Saml2_Service::check_message_id(), which never persists processed SAML message IDs to the wpo365_saml_message_ids transient due to a logic error that returns before saving. Attackers who capture a validly-signed SAMLResponse can replay it to the ACS endpoint repeatedly within its assertion validity window to log in as the victim, including administrators, without detection since the duplicate message ID check never triggers.
PLUGIN
Wpo365 Login
CVE-2026-122220
Risk Score
Threat Entry
Updated 2026-10-11
Wpo365 Login - Security Vulnerability (CVE-2026-96765)
The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id_token' parameter in all versions up to, and including, 44.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The payload is stored in the wpo365_errors transient for up to three days by submitting a crafted unauthenticated request with a forged id_token whose base64url-decoded unique_name…
PLUGIN
Wpo365 Login
CVE-2026-96765
Risk Score
Threat Entry
Updated 2026-10-10
Wpo365 Login - Security Vulnerability (CVE-2026-104759)
The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Authentication Bypass via OIDC Nonce Replay in all versions up to, and including, 44.1 This is due to `Id_Token_Service_Deprecated::process_openidconnect_token()` using the incompatible WordPress core `wp_verify_nonce()` function to validate a nonce produced by `Nonce_Service::create_nonce()` — a 64-character hex value that `wp_verify_nonce()` can never successfully verify — causing the nonce check to silently fail without terminating authentication, so execution continues into `authenticate_oidc_user()` with the attacker-supplied `id_token`. This makes it possible for unauthenticated attackers who have…
PLUGIN
Wpo365 Login
CVE-2026-104759
Risk Score
Threat Entry
Updated 2026-10-06
Wpo365 Login - Security Vulnerability (CVE-2026-102915)
Subscriber Broken Access Control in WPO365
PLUGIN
Wpo365 Login
CVE-2026-102915
Risk Score
Threat Entry
Updated 2026-07-24
WPO365 | Login - Cross-Site Request Forgery (CSRF) (CVE-2026-15212)
The WPO365 | Login plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 43.2. This is due to the Ajax_Service::verify_ajax_request() helper gating its wp_verify_nonce() call behind the boolean option 'enable_nonce_check', which is absent from the default 'wpo365_options' array and therefore evaluates to false via get_global_boolean_var(); as a result, the wp_ajax_wpo365_update_settings handler (Ajax_Service::update_settings) accepts POSTs from cross-origin pages and forwards the attacker-supplied 'settings' payload (base64/JSON) to Options_Service::update_options(), which merges every key/value into wpo365_options without a key allowlist. This makes it possible for unauthenticated attackers to…
PLUGIN
WPO365 | Login
CVE-2026-15212
Risk Score
Threat Entry
Updated 2026-06-17
Wpo365 Login - Server-Side Request Forgery (SSRF) (CVE-2025-67961)
Server-Side Request Forgery (SSRF) vulnerability in Marco van Wieren WPO365 wpo365-login allows Server Side Request Forgery.This issue affects WPO365: from n/a through
PLUGIN
Wpo365 Login
CVE-2025-67961
Risk Score
Threat Entry
Updated 2026-06-17
Wpo365 Login - Cross-Site Scripting (XSS) (CVE-2024-4706)
The WordPress + Microsoft Office 365 / Azure AD | LOGIN plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pintra' shortcode in all versions up to, and including, 27.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
PLUGIN
Wpo365 Login
CVE-2024-4706
Risk Score
Threat Entry
Updated 2026-06-17
WPO365 | LOGIN - Cross-Site Scripting (XSS) (CVE-2021-43409)
The “WPO365 | LOGIN” WordPress plugin (up to and including version 15.3) by wpo365.com is vulnerable to a persistent Cross-Site Scripting (XSS) vulnerability (also known as Stored or Second-Order XSS). Persistent XSS vulnerabilities occur when the application stores and retrieves client supplied data without proper handling of dangerous content. This type of XSS vulnerability is exploited by submitting malicious script content to the application which is then retrieved and executed by other application users. The attacker could exploit this to conduct a range of attacks against users of the affected…
PLUGIN
WPO365 | LOGIN
CVE-2021-43409
Risk Score
Threat Entry
Updated 2026-06-17
Wpo365 Login - Authentication Bypass (CVE-2020-26511)
The wpo365-login plugin before v11.7 for WordPress allows use of a symmetric algorithm to decrypt a JWT token. This leads to authentication bypass.
PLUGIN
Wpo365 Login
CVE-2020-26511
Risk Score