CVE-2026-75800

The Frontegg SAML SSO WordPress plugin through version 1.0.1 fails to verify the signature or issuer of SAML authentication responses before establishing a user session. This lack of validation allows unauthenticated attackers to take over any account, including administrators , or to create arbi...

EUVD-2026-76816

The Frontegg SAML SSO WordPress plugin through 1.0.1 does not verify the signature or issuer of SAML authentication responses before establishing a session, allowing unauthenticated attackers to log in as any user, including administrators, as well as to create arbitrary accounts...