{
 "id": "WPSEC-2026-3032",
 "url": "https://wpsec.com/vuln/WPSEC-2026-3032/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-3032/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-3032/index.md",
 "title": "WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) <= 45.2 - Unauthenticated Sensitive Information Exposure via SAML Encrypted Assertion Decryption Oracle",
 "description": "The WPO365 | LOGIN plugin for WordPress is vulnerable to Sensitive Information Exposure via encrypted SAML assertion decryption in all versions up to, and including, 45.2, due to the bundled SAML library letting attacker-supplied EncryptedData name an asymmetric algorithm, so that the service provider's private RSA key decrypts attacker-supplied data directly, and to mcrypt-based CBC algorithms failing only after the RSA key transport was decrypted (GHSA-39hg-wfcm-v4wv). This makes it possible for unauthenticated attackers to use the site as a decryption oracle against data encrypted for the service provider's key. Exploitation requires SAML 2.0 single sign-on with a service provider private key (encrypted assertions) to be configured.",
 "plugin": {
  "slug": "wpo365-login",
  "name": "WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)",
  "full_name": "WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)",
  "wordpress_org": "https://wordpress.org/plugins/wpo365-login/",
  "advisories_url": "https://wpsec.com/vuln/plugin/wpo365-login/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/wpo365-login"
 },
 "type": "SENSITIVE DATA DISCLOSURE",
 "cwe": [
  "CWE-327"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 3.7,
  "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
  "severity": "Low"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "45.3",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 45.3"
  ]
 },
 "introduced_in": null,
 "fixed_in": "45.3",
 "remediation": "Update to 45.3 or later.",
 "fix_released": "2026-11-12T08:35:11+00:00",
 "published": "2026-11-13T08:44:14+00:00",
 "updated": "2026-11-12T17:04:43.119366+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-3032/",
  "https://plugins.svn.wordpress.org/wpo365-login/tags/45.3/",
  "https://wordpress.org/plugins/wpo365-login/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/wpo365-login",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Medium",
  "affected_versions": "Medium",
  "as_of": "2026-11-13"
 }
}