WordPress security by component

WordPress + Microsoft Office 365 / Azure AD | LOGIN

Plugin description

WordPress + Microsoft Office 365 / Azure AD | LOGIN is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published May 23, 2024; the highest CVE/CNA score is 6.4.

Plugin slug: wordpress-microsoft-office-365-azure-ad-login

Latest vulnerability

CVE-2024-4706: WordPress + Microsoft Office 365 / Azure AD | LOGIN: Cross-site scripting

WordPress + Microsoft Office 365 / Azure AD | LOGIN is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedMay 23, 2024

Safe version guidanceSee mitigation notes

		Safe version
May 23, 2024	CVE-2024-4706 WordPress + Microsoft Office 365 / Azure AD \| LOGIN: Cross-site scripting WordPress + Microsoft Office 365 / Azure AD \| LOGIN is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.4 NVDPending