Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

1 matching record.

1. 27
   CVE NVD 24h ago

   The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Subject (via wp_mail/PHPMailer…

   The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Subject (via wp_mail/PHPMailer, e.g. CF7 your-subject)' parameter in all versions up to, and including, 6.2 due to…

   CVSS 7.2 CVE-2026-107759 Wpo365 Collaboration

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Wpo365&limit=100. RSS for this section: feed.xml.