CVE-2026-61979

Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...

CVE-2026-28149

Unauthenticated PHP Object Injection in Headless Single Sign On = 1.6 versions...

CVE-2026-28008

Unauthenticated Broken Authentication in OAuth Single Sign On – SSO OAuth Client = 7.0.0 versions...

CVE-2026-28148

Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...

CVE-2026-61979 WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...

EUVD-2026-57976

Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...

CVE-2026-61979

CVE-2026-61979 affects the WordPress SAML SP Single Sign On plugin (≤ 5.4.3). It enables unauthenticated privilege escalation, per the NVD/CVE records and CVE listings. The provided documents do not specify the exact exploit vector, affected versions beyond ≤ 5.4.3, or remediation steps (e.g., pa...

CVE-2026-61979

Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...

CVE-2026-28149

Unauthenticated PHP Object Injection in Headless Single Sign On = 1.6 versions...

EUVD-2026-57947

Unauthenticated PHP Object Injection in Headless Single Sign On = 1.6 versions...

CVE-2026-28148 WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability

Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...

CVE-2026-28148

Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...

EUVD-2026-57946

Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...

EUVD-2026-57944

Unauthenticated Broken Authentication in OAuth Single Sign On – SSO OAuth Client = 7.0.0 versions...

CVE-2026-28008

CVE-2026-28008 affects the WordPress plugin OAuth Single Sign On – SSO (OAuth Client) for versions ≤ 7.0.0. The vulnerability is described as Unauthenticated Broken Authentication , exposing a high-severity risk with a CVSSv3.1 base score of 9.8 (CRITICAL; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Th...

CVE-2026-28008

Unauthenticated Broken Authentication in OAuth Single Sign On – SSO OAuth Client = 7.0.0 versions...

PT-2026-71513

Unauthenticated PHP Object Injection in Headless Single Sign On = 1.6 versions...

PT-2026-71512

Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...

CVE-2026-16299

The Single Sign On For TNG WordPress plugin before 2.2.0 does not properly validate a password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full site takeover...

CVE-2026-16299

The CVE concerns the Single Sign On For TNG WordPress plugin prior to version 2.2.0. The root cause is improper validation of password reset requests, enabling unauthenticated attackers to reset passwords for arbitrary users (including administrators). This can lead to a full site takeover as des...