CVE-2026-122220

The WPO365 | LOGIN (wpo365-login) plugin (versions before 45.2 ) is vulnerable to an authentication bypass by capture-replay vulnerability. The root cause is a logic error in the Saml2_Service::check_message_id() function, which fails to persist processed SAML message IDs to the wpo365_saml_messa...

EUVD-2026-117064

WPO365 | LOGIN wpo365-login plugin before version 45.2 contains an authentication bypass by capture-replay vulnerability caused by a non-functional anti-replay check in Saml2Service::checkmessageid, which never persists processed SAML message IDs to the wpo365samlmessageids transient due to a log...