2309 matches found
CVE-2026-19842
The SAML Single Sign On WordPress plugin (versions 4.8.85 to 5.4.6) fails to verify SAML response signatures before storing certificates, allowing unauthenticated attackers to inject a self-signed certificate and promote it to trusted status via the admin panel, enabling full account takeover as ...
CVE-2026-61979
Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...
CVE-2026-28149
Unauthenticated PHP Object Injection in Headless Single Sign On = 1.6 versions...
CVE-2026-28008
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO OAuth Client = 7.0.0 versions...
CVE-2026-28148
Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...
CVE-2026-61979 WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...
CVE-2026-61979
CVE-2026-61979 affects the WordPress SAML SP Single Sign On plugin (≤ 5.4.3). It enables unauthenticated privilege escalation, per the NVD/CVE records and CVE listings. The provided documents do not specify the exact exploit vector, affected versions beyond ≤ 5.4.3, or remediation steps (e.g., pa...
EUVD-2026-57976
Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...
CVE-2026-61979
Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...
CVE-2026-28149
Unauthenticated PHP Object Injection in Headless Single Sign On = 1.6 versions...
EUVD-2026-57947
Unauthenticated PHP Object Injection in Headless Single Sign On = 1.6 versions...
CVE-2026-28148 WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...
CVE-2026-28148
Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...
EUVD-2026-57946
Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...
EUVD-2026-57944
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO OAuth Client = 7.0.0 versions...
CVE-2026-28008
CVE-2026-28008 affects the WordPress plugin OAuth Single Sign On – SSO (OAuth Client) for versions ≤ 7.0.0. The vulnerability is described as Unauthenticated Broken Authentication , exposing a high-severity risk with a CVSSv3.1 base score of 9.8 (CRITICAL; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Th...
CVE-2026-28008
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO OAuth Client = 7.0.0 versions...
WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by sequenceX0 in WordPress Plugin SAML SP Single Sign On versions = 5.4.3...
