WordPress plugin
All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High0
- Medium1
- Low0
All All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.8 | Authentication Bypass ≤2.2.5Update to 2.2.6 | CVE-2026-2628 |
- Critical9.8Authentication Bypass
≤2.2.5Update to 2.2.6
All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login: common questions
Does All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login: 1 critical, 1 medium. None are known to affect version null.
How do I check which version of All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login vulnerability?
CVE-2026-2628, published Mar 2, 2026: All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login <= 2.2.5 - Authentication Bypass. Severity: Critical (CVSS 9.8).
Is any All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login vulnerability listed in CISA KEV?
No. None of the known All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login vulnerabilities is currently listed in the CISA KEV catalog.