WordPress + Microsoft Office 365 / Azure AD | LOGIN, CVE-2025-67961

CVE, Research URL: CVE-2025-67961
Home page URL: Security reports for WordPress + Microsoft Office 365 / Azure AD | LOGIN
Application: WordPress + Microsoft Office 365 / Azure AD | LOGIN
Published on: Jan 22, 2026
Research Description: Server-Side Request Forgery (SSRF) vulnerability in Marco van Wieren WPO365 wpo365-login allows Server Side Request Forgery.This issue affects WPO365: from n/a through <= 40.0.
Affected versions: max 40.1.
Status: vulnerable