Plugin icon

SAML Single Sign On – SSO Login

miniorange-saml-20-single-sign-on

Vulnerabilities:

25

Last Updated:

September 17, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-09-18
Title
SAML Single Sign On < 6.0.0 - Unauthenticated Privilege Escalation via Account Matching
Fixed in
Fixed in 6.0.0
CVSS
8.1 (high)
Published
2026-08-29
Title
SAML Single Sign On < 5.4.7 - Unauthenticated Authentication Bypass via X.509 Certificate Poisoning
Fixed in
Fixed in 5.4.7
CVSS
7.5 (high)
Published
2026-08-17
Title
SAML Single Sign On 4.8.85 - 5.4.6 - Unauthenticated Administrator Account Takeover via SAML Trust Anchor Overwrite
Fixed in
Fixed in 5.4.7
CVSS
8.8 (high)
Published
2026-08-13
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Privilege Escalation
Fixed in
Fixed in 17.0.6
CVSS
9.8 (critical)
Published
2026-08-13
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Privilege Escalation
Fixed in
Fixed in 26.0.3
CVSS
9.8 (critical)
Published
2026-08-13
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Privilege Escalation
Fixed in
Fixed in 35.0.7
CVSS
9.8 (critical)
Published
2026-08-13
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Privilege Escalation
Fixed in
Fixed in 13.0.4
CVSS
9.8 (critical)
Published
2026-08-13
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Privilege Escalation
Fixed in
Fixed in 20.2.8
CVSS
9.8 (critical)
Published
2026-08-13
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Privilege Escalation
Fixed in
Fixed in 32.0.8
CVSS
9.8 (critical)
Published
2026-08-13
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Privilege Escalation
Fixed in
Fixed in 5.4.5
CVSS
9.8 (critical)
Published
2026-07-23
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Authentication Bypass via SAMLResponse Parameter
Fixed in
Fixed in 20.2.8
CVSS
9.8 (critical)
Published
2026-07-23
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Authentication Bypass via SAMLResponse Parameter
Fixed in
Fixed in 32.0.8
CVSS
9.8 (critical)
Published
2026-07-23
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Authentication Bypass via SAMLResponse Parameter
Fixed in
Fixed in 17.0.6
CVSS
9.8 (critical)
Published
2026-07-23
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Authentication Bypass via SAMLResponse Parameter
Fixed in
Fixed in 26.0.3
CVSS
9.8 (critical)
Published
2026-07-23
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Authentication Bypass via SAMLResponse Parameter
Fixed in
Fixed in 35.0.7
CVSS
9.8 (critical)
Published
2026-07-23
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Authentication Bypass via SAMLResponse Parameter
Fixed in
Fixed in 5.4.5
CVSS
9.8 (critical)
Published
2026-07-23
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Authentication Bypass via SAMLResponse Parameter
Fixed in
Fixed in 13.0.4
CVSS
9.8 (critical)
Published
2026-07-15
Title
SAML Single Sign On < 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter Signature Algorithm Confusion
Fixed in
Fixed in 5.4.4
CVSS
9.8 (critical)
Published
2023-09-05
Title
SAML SP Single Sign On < 5.0.5 - Missing Authorization to notice dismissal
Fixed in
Fixed in 5.0.5
CVSS
4.3 (medium)
Published
2023-01-06
Title
miniOrange WordPress SAML SSO Standard < 16.0.8 - Open Redirect in SSO login
Fixed in
Fixed in 16.0.8
CVSS
4.7 (medium)
Published
2023-01-06
Title
miniOrange WordPress SAML SSO Premium Multisite < 20.0.7 - Open Redirect in SSO login
Fixed in
Fixed in 20.0.7
CVSS
4.7 (medium)
Published
2023-01-06
Title
miniOrange WordPress SAML SSO Premium < 12.1.0 - Open Redirect in SSO login
Fixed in
Fixed in 12.1.0
CVSS
4.7 (medium)
Published
2020-01-28
Title
SAML SP Single Sign On < 4.8.84 - Cross-Site Scripting (XSS) via Crafted SAML XML Response
Fixed in
Fixed in 4.8.84
CVSS
6.1 (medium)
Published
2019-05-27
Title
SAML SP Single Sign On <= 4.8.72 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 4.8.73
CVSS
6.1 (medium)
Published
2019-05-16
Title
SAML SP SSO < 4.8.74 - Multiple Cross-Site Request Forgery (CSRF)
Fixed in
Fixed in 4.8.74
CVSS
n/a