CVE-2026-82842

CVE-2026-82842 affects the SAML Single Sign On WordPress plugin in versions before 6.0.0 . The plugin fails to honour the configured criterion for linking an incoming SSO identity to a WordPress account, instead always resolving the identity by login name regardless of the site's chosen matching ...