plugin

Mail Integration 365 Vulnerabilities

2 known security issues reported for the Mail Integration 365 WordPress plugin. Most recent disclosed Aug 23, 2023.

1 medium

Running Mail Integration 365 on your site? Check whether your installed version is affected.

WPO365 | Mail Integration for Office 365 / Outlook [mail-integration-365] < 1.9.1

unknown

[en] Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPO365 | Mail Integration for Office 365 / Outlook plugin <= 1.9.0 versions.

Affected:: up to 1.9.1
Fixed in:: 1.9.1
Disclosed:: Aug 23, 2023

CVE-2023-32119 on NVD →

WPO365 | Mail Integration for Office 365 / Outlook <= 1.9.0 - reflected Cross-Site Scripting via error_description

medium

The WPO365 | Mail Integration for Office 365 / Outlook plugin for WordPress is vulnerable to reflected Cross-Site Scripting via the ‘error_description’ parameter in versions up to, and including, 1.9.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to in...

CVSS:: 6.1
Affected:: up to 1.9.0
Fixed in:: 1.9.1
Disclosed:: May 5, 2023

CVE-2023-32119 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database