Skip to content
Threat Feed
Subscribe

Product

SAML Single Sign on – SSO Login Plugin (<= 5.4.4)

1 brief RSS
critical advisory

WordPress SAML Single Sign On Plugin Authentication Bypass (CVE-2026-15981)

A critical authentication bypass vulnerability, CVE-2026-15981, affects the SAML Single Sign On - SSO Login plugin for WordPress (versions up to and including 5.4.4), allowing unauthenticated attackers to log in as any existing user, including administrators, by crafting a malformed SAMLResponse that misleads the plugin's signature validation logic.

SAML Single Sign On – SSO Login plugin authentication-bypass wordpress web-vulnerability cve-2026-15981
2t 1c