Marco van Wieren vulnerabilities
Published CVEs affecting Marco van Wieren products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-102915
High · 8.5
CWE-862 Oct 6, 2026
WordPress WPO365 plugin <= 44.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in WPO365 <= 44.1 versions.
CVE-2025-67961
Medium · 6.4
CWE-918 Jan 22, 2026
WordPress WPO365 plugin <= 40.0 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery (SSRF) vulnerability in Marco van Wieren WPO365 wpo365-login allows Server Side Request Forgery.This issue affects WPO365: from n/a through <= 40.0.