Approved changes feed: RSS · Atom

cpe:2.3:a:cyberlord92:all-in-one_microsoft_365_&_entra_id_/_azure_ad_sso_login:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCyberlord92 (d4db5aca-fcb6-5704-b2d9-5b8ecb1765d8)
ProductAll In One Microsoft 365 & Entra Id / Azure Ad Sso Login (6e2b8695-26fa-5e93-acdc-29696a4525fb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-2628 vulnerable 2026-06-03 15:19:24.655983 All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login <= 2.2.5 - Authentication Bypass
CRITICAL (9.8)
The All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.2.5. This makes it possible for unauthenticated attackers to bypass authentication and log in as other users, including administrators.
Published: 2026-03-03T01:21:49.975Z
Updated: 2026-04-08T16:56:07.725Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.