| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | Exploit for CVE-2026-15013 | 27 Jul 202608:54 | – | githubexploit |
 | CVE-2026-15013 | 16 Jul 202603:44 | – | attackerkb |
 | CVE-2026-15013 | 16 Jul 202606:00 | – | circl |
 | CVE-2026-15013 SAML Single Sign On <= 5.4.3 - Unauthenticated Authentication Bypass via 'SAMLResponse' Parameter Signature Algorithm Confusion | 16 Jul 202603:44 | – | cvelist |
 | miniOrange 5.4.3 - Unauthenticated Auth Bypass | 1 Sep 202600:00 | – | exploitdb |
 | EUVD-2026-44866 | 16 Jul 202603:44 | – | euvd |
 | CVE-2026-15013 | 1 Oct 202615:20 | – | kitploit |
 | CVE-2026-15013 | 16 Jul 202605:16 | – | nvd |
 | PT-2026-60407 | 15 Jul 202600:00 | – | ptsecurity |
 | CVE-2026-15013: Improper Verification of Cryptographic Signature | 16 Jul 202600:00 | – | rapid7 |
10
Node
[
{
"vendor": "cyberlord92",
"product": "SAML Single Sign On – SSO Login",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "5.4.3",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| option | query param | /?option=mosaml_metadata | Discovery of IdP/ACS endpoints by requesting mosaml_metadata. | CWE-347 |
| option | query param | /?option=saml_user_login | Trigger or discover IdP issuer via saml_user_login flow. | CWE-347 |
| tab | query param | /wp-admin/plugin-install.php?tab=upload | Access plugin upload UI to host a malicious plugin ZIP. | CWE-347 |
| action | query param | /wp-admin/update.php?action=upload-plugin | Upload a malicious plugin ZIP via WordPress plugin upgrade interface. | CWE-347 |
| per_page | query param | /wp-json/wp/v2/users | Enumerate WordPress users via REST API (massive user discovery). | CWE-347 |
| rest_route | query param | /?rest_route=/wp/v2/users | REST route-based user enumeration. | CWE-347 |
| uid | path | /wp-json/wp/v2/users/{uid} | Target a specific user to enumerate usernames. | CWE-347 |
| rest_route | query param | /?rest_route=/wp/v2/users/{uid} | REST route to access a specific user (enumeration). | CWE-347 |
| uid | query param | /?rest_route=/wp/v2/users/{uid} | REST route to access a specific user (enumeration). | CWE-347 |
| author | query param | /?author={uid} | Author parameter based user enumeration. | CWE-347 |
10
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
07 Aug 2026 06:16Current
5.9Medium risk
Vulners AI Score5.9
CVSS 3.19.8
EPSS0.01504
SSVC