Product

WPO365 | MICROSOFT 365 GRAPH MAILER (<= 6.2)

1 brief RSS

WPO365 | MICROSOFT 365 GRAPH MAILER: Stored Cross-Site Scripting (CVE-2026-107759)

The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress contains a Stored Cross-Site Scripting vulnerability allowing unauthenticated attackers to inject arbitrary web scripts via the mail subject parameter.

WPO365 | MICROSOFT 365 GRAPH MAILER xss web-application wordpress cve-2026-107759

1r 2t 1c 28m ago