Skip to content
Threat Feed
Subscribe

Product

MiniOrange SAML 2.0 Single Sign on – SSO Login (WordPress) <= 5.4.4

1 brief RSS
critical advisory

WordPress SAML Single Sign On Plugin Authentication Bypass (CVE-2026-15981)

A critical authentication bypass vulnerability, CVE-2026-15981, affects the SAML Single Sign On - SSO Login plugin for WordPress (versions up to and including 5.4.4), allowing unauthenticated attackers to log in as any existing user, including administrators, by crafting a malformed SAMLResponse that misleads the plugin's signature validation logic.

PoC SAML Single Sign On – SSO Login plugin +2 authentication-bypass wordpress web-vulnerability cve-2026-15981
2t 1c 2i updated