Advisories · Technology

WPO365 | MICROSOFT 365 GRAPH MAILER.

Every CVE that names WPO365 | MICROSOFT 365 GRAPH MAILER among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-107759 CVE record

CVSS 7.2 High

WPO365 | MICROSOFT 365 GRAPH MAILER <= 6.2 - Unauthenticated Stored Cross-Site Scripting via Email Subject via wp_mail
- WPO365 | MICROSOFT 365 GRAPH MAILER
- Cross-site scripting (XSS)
Not analysed yet 31 Oct 2026
CVE-2025-1488 CVE record

CVSS 4.7 Medium

WPO365 | MICROSOFT 365 GRAPH MAILER <= 3.2 - Open Redirect via 'redirect_to' Parameter
- WPO365 | MICROSOFT 365 GRAPH MAILER
- Open redirect
Not analysed yet 24 Feb 2025