CVE-2026-107759: wpo365 WPO365 | MICROSOFT 365 GRAPH MAILER: The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…

The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Subject via wpmail/PHPMailer, e.g. CF7 your-subject' parameter in all versions up to, and including, 6.2 due to insufficient input sanitization and output escaping. This makes it...