wpo365

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

wpo365 records in CISA KEV

No wpo365 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wordpress + Azure Ad / Microsoft Office 365 2 records MEDIUM Mail Integration For Office 365 / Outlook 1 record LOW Microsoft 365 Graph Mailer 1 record LOW

Records

2 records in Wordpress + Azure Ad / Microsoft Office 365 · all components

TI-2021-19351 CVE-2021-43409 · GHSA-px36-5x6h-5x8g

WPO365 | LOGIN - Wordpress Plugin Persistent Cross-Site Scripting

MEDIUM 42

The “WPO365 | LOGIN” WordPress plugin (up to and including version 15.3) by wpo365.com is vulnerable to a persistent Cross-Site Scripting (XSS) vulnerability (also known as Stored or Second-Order XSS).

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00968 Published 2021-11-19 Fixed in 15.3 CWE-79

TI-2020-16157 CVE-2020-26511 · GHSA-28p2-p7pc-m535

The wpo365-login plugin before v11.7 for WordPress allows use of a symmetric algorithm to…

LOW 37

The wpo365-login plugin before v11.7 for WordPress allows use of a symmetric algorithm to decrypt a JWT token.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02146 Published 2020-10-02 No fix listed CWE-287

Open these records in search →

Critical	2
High	5
Medium	3
Low	0
No CVSS	0