WordPress plugin
SAML Single Sign On – SSO Login security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 13 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical3
- High5
- Medium5
- Low0
All SAML Single Sign On – SSO Login vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Unauthenticated Denial of Service ≤6.1.0Update to 6.2.0 | CVE-2026-62126 | |
| High7.3 | Unauthenticated Privilege Escalation ≤5.4.7Update to 6.0.0 | CVE-2026-82842 | |
| High7.5 | Unauthenticated Authentication Bypass via X.509 Certificate Poisoning ≤5.4.6Update to 5.4.7 | CVE-2026-75807 | |
| High7.3 | Unauthenticated Privilege Escalation 4.8.85 – 5.4.6Update to 5.4.7 | CVE-2026-19842 | |
| Critical9.8 | Unauthenticated Privilege Escalation ≤5.4.3Update to 5.4.4 | CVE-2026-61979 | |
| Critical9.8 | Unauthenticated Authentication Bypass via SAMLResponse Parameter ≤5.4.4Update to 5.4.5 | CVE-2026-15981 | |
| Critical9.8 | Unauthenticated Authentication Bypass via 'SAMLResponse' Parameter Signature Algorithm Confusion ≤5.4.3Update to 5.4.4 | CVE-2026-15013 | |
| High8.8 | Cross-Site Request Forgery ≤4.8.75Update to 4.8.76 | — |
- High7.5Unauthenticated Denial of Service
≤6.1.0Update to 6.2.0
- High7.3Unauthenticated Privilege Escalation
≤5.4.7Update to 6.0.0
- High7.5Unauthenticated Authentication Bypass via X.509 Certificate Poisoning
≤5.4.6Update to 5.4.7
- High7.3Unauthenticated Privilege Escalation
4.8.85 – 5.4.6Update to 5.4.7
- Critical9.8Unauthenticated Privilege Escalation
≤5.4.3Update to 5.4.4
- Critical9.8Unauthenticated Authentication Bypass via SAMLResponse Parameter
≤5.4.4Update to 5.4.5
- Critical9.8Unauthenticated Authentication Bypass via 'SAMLResponse' Parameter Signature Algorithm Confusion
≤5.4.3Update to 5.4.4
- High8.8Cross-Site Request Forgery
≤4.8.75Update to 4.8.76
SAML Single Sign On – SSO Login: common questions
Does SAML Single Sign On – SSO Login have known vulnerabilities?
Yes. VulnCrest Radar lists 13 known vulnerabilities in SAML Single Sign On – SSO Login: 3 critical, 5 high, 5 medium. None are known to affect version null.
How do I check which version of SAML Single Sign On – SSO Login I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent SAML Single Sign On – SSO Login vulnerability?
CVE-2026-62126, published Nov 2, 2026: SAML Single Sign On – SSO Login <= 6.1.0 - Unauthenticated Denial of Service. Severity: High (CVSS 7.5).
Is any SAML Single Sign On – SSO Login vulnerability listed in CISA KEV?
No. None of the known SAML Single Sign On – SSO Login vulnerabilities is currently listed in the CISA KEV catalog.