-
URGENT: nOAuth, or how an OpenID Connect misconfiguration can lead to full account takeover
If you have enabled support for multi-tenant authentication for your registered application in Azure AD then please read the following information carefully. The Descope security team discovered a gray area in Microsoft Azure AD multi-tenant OAuth applications that could lead to full account takeover. Please compare your configuration with the example below, if you are not sure whether…
-
URGENT: WPO365 | LOGIN plugin v23.0 will prevent WordPress from checking for plugin updates
If you already installed version 23.0 of the WPO365 | LOGIN plugin, then please read the following information very carefully. A severe issue with the WPO365 | LOGIN plugin v23.0 will prevent WordPress from checking for plugin updates. This does not only affect the WPO365 plugins, but all installed WordPress plugins. As a result, you do not…
-
Get instantly notified about failures
Ever wondered how you can receive an SMS or email notification when an exception occurs e.g. when an email is not sent or a user was not able to sign in with Microsoft? In this article, I will explain how you can receive an SMS whenever the WPO365 | LOGIN plugin cannot sign in a…
-
Unknown error occurred whilst checking your license key
If you went ahead and updated the WPO365 | LOGIN plugin to version 20.0 and you have a premium paid extension installed, then you suddenly may see a notice informing you that an Unknown error occurred whilst checking your license key for WPO365 | xxx. Please try again. This information, however, is a false-positive and results…
-
Share your idea!
I love to hear from you, what I should do next. Since the very first release of the WPO365 | LOGIN plugin, I have tried to listen to you and understand your requirements. Now I want to take this to the next level and give you – my customer – a voice. So don’t hesitate, navigate to https://www.wpo365.com/user-voice/ and share your…