WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN), with AI-generated Chinese analysis, references, and POCs.

Vendor: wpo365

CVE ID	Title	CVSS	Severity	Published
CVE-2026-104759	WPO365 \| SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 \| LOGIN) <= 44.1 - Unauthenticated Authentication Bypass via OIDC Nonce Replay via id_token Nonce Verification CWE-287	8.1	High	2026-10-10
CVE-2026-96765	WPO365 \| SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 \| LOGIN) <= 44.1 - Unauthenticated Stored Cross-Site Scripting via 'id_token' Parameter (iss / unique_name JWT claims) CWE-79	7.2	High	2026-10-10
CVE-2026-15212	WPO365 \| SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 \| LOGIN) <= 43.2 - Cross-Site Request Forgery to Privilege Escalation via Plugin Settings Update CWE-352	8.8	High	2026-07-23
CVE-2024-4706	WordPress + Microsoft Office 365 / Azure AD \| LOGIN <= 27.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via pintra Shortcode CWE-79	6.4	Medium	2024-05-23

All 4 known CVE vulnerabilities affecting WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) with full Chinese analysis, references, and POCs where available.