WordPress plugin
SAML Single Sign On – SSO Login security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 13 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical3
- High5
- Medium5
- Low0
All SAML Single Sign On – SSO Login vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Unauthenticated Denial of Service ≤6.1.0Update to 6.2.0 | CVE-2026-62126 | |
| High7.3 | Unauthenticated Privilege Escalation ≤5.4.7Update to 6.0.0 | CVE-2026-82842 | |
| High7.5 | Unauthenticated Authentication Bypass via X.509 Certificate Poisoning ≤5.4.6Update to 5.4.7 | CVE-2026-75807 | |
| High7.3 | Unauthenticated Privilege Escalation 4.8.85 – 5.4.6Update to 5.4.7 | CVE-2026-19842 | |
| Critical9.8 | Unauthenticated Privilege Escalation ≤5.4.3Update to 5.4.4 | CVE-2026-61979 | |
| Critical9.8 | Unauthenticated Authentication Bypass via SAMLResponse Parameter ≤5.4.4Update to 5.4.5 | CVE-2026-15981 | |
| Critical9.8 | Unauthenticated Authentication Bypass via 'SAMLResponse' Parameter Signature Algorithm Confusion ≤5.4.3Update to 5.4.4 | CVE-2026-15013 | |
| Medium4.3 | Missing Authorization to notice dismissal ≤5.0.4Update to 5.0.5 | CVE-2023-41873 | |
| Medium6.1 | Open Redirect 16 – <16.0.8Update to 16.0.8 | CVE-2022-4496 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤4.9.20Update to 4.9.21 | — | |
| Medium6.1 | Cross-Site Scripting ≤4.8.83Update to 4.8.84 | CVE-2020-6850 | |
| Medium6.1 | Cross-Site Scripting <4.8.73Update to 4.8.73 | CVE-2019-12346 | |
| High8.8 | Cross-Site Request Forgery ≤4.8.75Update to 4.8.76 | — |
- High7.5Unauthenticated Denial of Service
≤6.1.0Update to 6.2.0
- High7.3Unauthenticated Privilege Escalation
≤5.4.7Update to 6.0.0
- High7.5Unauthenticated Authentication Bypass via X.509 Certificate Poisoning
≤5.4.6Update to 5.4.7
- High7.3Unauthenticated Privilege Escalation
4.8.85 – 5.4.6Update to 5.4.7
- Critical9.8Unauthenticated Privilege Escalation
≤5.4.3Update to 5.4.4
- Critical9.8Unauthenticated Authentication Bypass via SAMLResponse Parameter
≤5.4.4Update to 5.4.5
- Critical9.8Unauthenticated Authentication Bypass via 'SAMLResponse' Parameter Signature Algorithm Confusion
≤5.4.3Update to 5.4.4
- Medium4.3Missing Authorization to notice dismissal
≤5.0.4Update to 5.0.5
- Medium6.1Open Redirect
16 – <16.0.8Update to 16.0.8
- Medium6.1Reflected Cross-Site Scripting
≤4.9.20Update to 4.9.21
- Medium6.1Cross-Site Scripting
≤4.8.83Update to 4.8.84
- Medium6.1Cross-Site Scripting
<4.8.73Update to 4.8.73
- High8.8Cross-Site Request Forgery
≤4.8.75Update to 4.8.76
SAML Single Sign On – SSO Login: common questions
Does SAML Single Sign On – SSO Login have known vulnerabilities?
Yes. VulnCrest Radar lists 13 known vulnerabilities in SAML Single Sign On – SSO Login: 3 critical, 5 high, 5 medium. None are known to affect version null.
How do I check which version of SAML Single Sign On – SSO Login I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent SAML Single Sign On – SSO Login vulnerability?
CVE-2026-62126, published Nov 2, 2026: SAML Single Sign On – SSO Login <= 6.1.0 - Unauthenticated Denial of Service. Severity: High (CVSS 7.5).
Is any SAML Single Sign On – SSO Login vulnerability listed in CISA KEV?
No. None of the known SAML Single Sign On – SSO Login vulnerabilities is currently listed in the CISA KEV catalog.