microsoft_365_graph_mailer vulnerabilities

CVEs whose affected-version data names the microsoft_365_graph_mailer package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-107759High· 7.2

6d ago

WPO365 | MICROSOFT 365 GRAPH MAILER <= 6.2 - Unauthenticated Stored Cross-Site Scripting via Email Subject via wp_mail

The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Subject (via wp_mail/PHPMailer, e.g. CF7 your-subject)' parameter in all versions up to, and including, 6.2 due to insuffi…

▾ Twilightwpo365 · WPO365 | MICROSOFT 365 GRAPH MAILEREPSS 0.27%via CVEORG