CVE-2025-1488

CVE-2025-1488 affects the WPO365 | MICROSOFT 365 GRAPH MAILER WordPress plugin. Root cause: insufficient validation of the redirect_to URL parameter, enabling Open Redirects in versions up to and including 3.2. Impact: unauthenticated attackers can lure users to attacker‑controlled sites by craft...