SAML Single Sign On – SSO Login vulnerabilities
3 known vulnerabilities in SAML Single Sign On – SSO Login from Cyberlord92. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
SAML Single Sign On – SSO Login: Improper Authentication
The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.4.6. This is due to the mo_saml_login_validate() ACS handler persisting the X.509 certificate extracted from an incoming SAMLRes
- 9.8 Critical severity
SAML Single Sign On – SSO Login: Improper Authentication
The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.4. This is due to the mo_saml_validate_signature() function performing a loose boolean check on the raw tri-state integer
- 9.8 Critical severity
SAML Single Sign On – SSO Login: Improper Verification of Cryptographic Signature
The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass via SAML Signature Algorithm Confusion in all versions up to, and including, 5.4.3. The vulnerability exists because `Mo_SAML_Utilities::mo_saml_cast_key()` reads t