EUVD-2026-114654

The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Subject via wpmail/PHPMailer, e.g. CF7 your-subject' parameter in all versions up to, and including, 6.2 due to insufficient input sanitization and output escaping. This makes it...