Skip to content

CVE record · 1 source

CVE-2026-107759

CVSS 7.2

The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Subject (via wp_mail/PHPMailer…

Vendor: Wpo365
Product: WPO365 | MICROSOFT 365 GRAPH MAILER
CVSS v3.1: 7.2 AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Weakness: CWE-79
Exposure class: Collaboration, Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

27

CVE NVD 24h ago

The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Subject (via wp_mail/PHPMailer…

The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Subject (via wp_mail/PHPMailer, e.g. CF7 your-subject)' parameter in all versions up to, and including, 6.2 due to…

CVSS 7.2 CVE-2026-107759 Wpo365