Skip to content
PluginCanary

WPO365

WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)
by Marco van Wieren · 10,000+ active installs · Checked 5 Nov 2026
Healthy

Healthy: maintained, last release 4 Nov 2026, 43 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for WPO365
Ownership100
Maintenance100
Security60
SupportNo data
Reputation85

How the score works

Quick answers

Is WPO365 still maintained?
Yes. Last release 4 Nov 2026, 43 releases in the last 24 months. 4 Nov 2026 · wordpress.org
Who owns WPO365, and has it changed hands?
No change recorded. Main committer wpo365 since Sep 2017. 5 Nov 2026 · SVN log
Was WPO365 removed from wordpress.org?
No. Listed on wordpress.org as of 5 Nov 2026. 5 Nov 2026 · wordpress.org
Is WPO365 safe?
8 known vulnerabilities, all fixed (latest in 45.0). Not on the exploited list. 9 Oct 2026 · Wordfence Intelligence
Is the latest WPO365 update safe to install?
No ownership change before 45.2. No one-star spike after it. 4 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
wpo36528 Sep 2017 to 4 Nov 2026, 353 commits

1 committer recorded. No ownership change since 2017.

Maintenance

Last release
today
Releases, 24 months
43
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for WPO365
Q1 20242
Q2 20246
Q3 20246
Q4 20245
Q1 20254
Q2 20253
Q3 20253
Q4 20254
Q1 20262
Q2 202617
Q3 20265
Q4 20263

Last release 4 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (4 reviews). Lifetime: 4.9.

Average rating per quarter for WPO365
Q2 20245.0
Q3 20245.0
Q4 20245.0
Q1 20254.0
Q2 20255.0
Q3 20255.0
Q4 20255.0
Q1 20265.0
Q2 20265.0
Q3 20265.0
Q4 20265.0

Average rating stayed at 5.0 between Q2 2024 and Q4 2026.

Rating distribution
5 star150
4 star1
3 star1
2 star1
1 star1

Security record

5 vulnerabilities in 24 months (8 on record), all patched (latest fixed in 45.0).

Show 8 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
9 Oct 2026WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) <= 44.1 - Unauthenticated Stored Cross-Site Scripting via 'id_token' Parameter (iss / unique_name JWT claims)7.2<= 44.145.0Patched before disclosure
9 Oct 2026WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) <= 44.1 - Unauthenticated Authentication Bypass via OIDC Nonce Replay via id_token Nonce Verification8.1<= 44.145.0Patched before disclosure
5 Oct 2026WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) <= 44.1 - Missing Authorization4.3<= 44.145.0Patched before disclosure
23 Jul 2026WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) <= 43.2 - Cross-Site Request Forgery to Privilege Escalation via Plugin Settings Update8.8<= 43.243.3Patched before disclosure
21 Jan 2026WPO365 <= 40.0 - Authenticated (Subscriber+) Server-Side Request Forgery6.4<= 40.040.1Patched before disclosure
22 May 2024WordPress + Microsoft Office 365 / Azure AD | LOGIN <= 27.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via pintra Shortcode6.4<= 27.228.0Patched before disclosure
15 Oct 2021WordPress + Microsoft Office 365 / Azure AD | LOGIN <= 15.3 - Stored Cross-Site Scripting6.1<= 15.315.4n/a
2 Oct 2020WPO365 | LOGIN <= 11.6 - Authentication Bypass9.1<= 11.611.7n/a

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

50% of 2 support threads resolved in the last 2 months.

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WPO365
4 May 2026331
11 May 20261,426
18 May 202611,029
25 May 202611,690
1 Jun 202612,897
8 Jun 20262,739
15 Jun 20261,673
22 Jun 202611,864
29 Jun 20262,596
6 Jul 20266,140
13 Jul 20266,080
20 Jul 20266,625
27 Jul 20262,702
3 Aug 20262,245
10 Aug 20261,675
17 Aug 20261,390
24 Aug 20261,490
31 Aug 20269,811
7 Sep 20263,437
14 Sep 20262,558
21 Sep 20262,634
28 Sep 20263,603
5 Oct 20266,834
12 Oct 20264,398
19 Oct 20266,820
26 Oct 20263,537
2 Nov 2026527

Weekly downloads over the last 4 weeks are 20% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Login for Google Apps by WPAuthScore 100 · 10,000+Nextend Social Login and RegisterScore 91 · 200,000+Wp Social Login and Register SocialScore 91 · 70,000+

Facts

Version45.2
AuthorMarco van Wieren
Added28 Sep 2017
Last updated4 Nov 2026
Active installs10,000+
Requires WordPress5.0
Tested up to7.1.4
Requires PHP7.4
CategoryCommunication & Messaging > SMTP & Email Delivery Services
Tagssso, email, powerbi, microsoft, sharepoint

Other plugins by this author: WPO365 | MICROSOFT 365 GRAPH MAILER, WPO365 | Mail Integration for Office 365 / Outlook, WPO365 | SAMESITE

Questions

Is WPO365 still maintained?

Yes. Last release 4 Nov 2026, 43 releases in the last 24 months.

Who owns WPO365, and has it changed hands?

No change recorded. Main committer wpo365 since Sep 2017.

Was WPO365 removed from wordpress.org?

No. Listed on wordpress.org as of 5 Nov 2026.

Is WPO365 safe?

8 known vulnerabilities, all fixed (latest in 45.0). Not on the exploited list.

Is the latest WPO365 update safe to install?

No ownership change before 45.2. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 5 Nov 2026.Report a data issue