| Package | Affected versions | Patched versions |
|---|---|---|
| wordpress + azure ad / microsoft office 365 | < 11.7 | 11.7 |
The wpo365-login plugin before v11.7 for WordPress allows use of a symmetric algorithm to decrypt a JWT token. This leads to authentication bypass.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free