Plugin icon

SAML Single Sign On – SSO Login

miniorange-saml-20-single-sign-on

Vulnerabilities:

11

Last Updated:

August 21, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-08-17
Title
SAML Single Sign On 4.8.85 - 5.4.6 - Unauthenticated Administrator Account Takeover via SAML Trust Anchor Overwrite
Fixed in
Fixed in 5.4.7
CVSS
8.8 (high)
Published
2026-08-13
Title
SAML Single Sign On – SSO Login < 5.4.4 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 5.4.4
CVSS
9.8 (critical)
Published
2026-07-23
Title
SAML Single Sign On < 5.4.5 - Unauthenticated Authentication Bypass via SAMLResponse Parameter
Fixed in
Fixed in 5.4.5
CVSS
9.8 (critical)
Published
2026-07-15
Title
SAML Single Sign On < 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter Signature Algorithm Confusion
Fixed in
Fixed in 5.4.4
CVSS
9.8 (critical)
Published
2023-09-05
Title
SAML SP Single Sign On < 5.0.5 - Missing Authorization to notice dismissal
Fixed in
Fixed in 5.0.5
CVSS
4.3 (medium)
Published
2023-01-06
Title
miniOrange WordPress SAML SSO Premium < 12.1.0 - Open Redirect in SSO login
Fixed in
Fixed in 12.1.0
CVSS
4.7 (medium)
Published
2023-01-06
Title
miniOrange WordPress SAML SSO Standard < 16.0.8 - Open Redirect in SSO login
Fixed in
Fixed in 16.0.8
CVSS
4.7 (medium)
Published
2023-01-06
Title
miniOrange WordPress SAML SSO Premium Multisite < 20.0.7 - Open Redirect in SSO login
Fixed in
Fixed in 20.0.7
CVSS
4.7 (medium)
Published
2020-01-28
Title
SAML SP Single Sign On < 4.8.84 - Cross-Site Scripting (XSS) via Crafted SAML XML Response
Fixed in
Fixed in 4.8.84
CVSS
6.1 (medium)
Published
2019-05-27
Title
SAML SP Single Sign On <= 4.8.72 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 4.8.73
CVSS
6.1 (medium)
Published
2019-05-16
Title
SAML SP SSO < 4.8.74 - Multiple Cross-Site Request Forgery (CSRF)
Fixed in
Fixed in 4.8.74
CVSS
n/a