Wpo365 Wordpress + Azure Ad / Microsoft Office 365 — known CVE vulnerabilities

Every CVE whose affected-product data names Wpo365 Wordpress + Azure Ad / Microsoft Office 365, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-43409 — CVSS 9.3 (critical): The “WPO365 | LOGIN” WordPress plugin (up to and including version 15.3) by wpo365.com is vulnerable to a persistent Cross-Site…
• CVE-2020-26511 — CVSS 7.5 (high): The wpo365-login plugin before v11.7 for WordPress allows use of a symmetric algorithm to decrypt a JWT token. This leads to authentication…