Vulnerabilities / All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login
All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login vulnerabilities
Advisories WPSec published for All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login. Other sources may list more. Its attack surface: All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-29 | WPSEC-2026-1952 | All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login <= 2.2.8 - Authenticated (Subscriber+) Microsoft Graph Request Injection via 'doc_path' and 'query_text' Parameters | Medium 6.5 | 2.2.9 |
| 2026-10-29 | WPSEC-2026-1951 | All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login <= 2.2.8 - Unauthenticated Missing Authorization to SharePoint Refresh Token Deletion and Replacement | Medium 6.5 | 2.2.9 |
License: CC BY 4.0