Skip to content
Threat Feed
Subscribe

Product

WPO365 | LOGIN (< 45.2)

1 brief RSS
high advisory

WPO365 | LOGIN: Authentication bypass via SAML replay (CVE-2026-122220)

The WPO365 | LOGIN plugin for WordPress fails to persist SAML message IDs, enabling attackers to perform replay attacks against the ACS endpoint to bypass authentication.

WPO365 | LOGIN
1t 1c