CyberSecBulletin

SAML Single Sign On vulnerabilities

We track 2 vulnerabilities in SAML Single Sign On products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 20, 2026.

2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score

Latest SAML Single Sign On vulnerabilities

  • 8.1 High severity

    SAML Single Sign On: Improper Privilege Management

    CVE-2026-82842SAML Single Sign On

    The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for linking an incoming single sign-on identity to a WordPress account, always resolving the identity by login name whatever the site has chosen, which allows an att

  • 8.8 High severity

    SAML Single Sign On: Improper Authentication

    CVE-2026-19842SAML Single Sign On

    The SAML Single Sign On WordPress plugin before 5.4.7 does not verify the signature of a SAML response before storing the certificate it carries, and offers an administrator a one-click control that promotes that stored certificate to the site's trusted signin