Skip to content

CVE PROGRAM SOURCE RECORD8.1 High

CVE-2026-61979

WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability

Read JSON ↗CVE.org ↗

Status: Published
Published: 2026-08-13
Updated: 2026-08-13
Assigning organization: Patchstack

Description

Unauthenticated Privilege Escalation in SAML SP Single Sign On <= 5.4.3 versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

miniOrange SAML SP Single Sign On

Default version status: unaffected

n/a to ≤ 5.4.3affected

References

https://patchstack.com/database/wordpress/plugin/miniorange-saml-20-single-sign-on/vulnerability/wordpress-saml-sp-single-sign-on-plugin-5-4-3-privilege-escalation-vulnerability?_s_id=cve ↗