SAML SP Single Sign On vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

SS

Product

SAML SP Single Sign On

by miniOrange · last CVE Aug 13, 2026

4

CVEs

0

On KEV

8.1

Max CVSS

0

New 30D

Vulnerabilities4 In the news2 Timeline

Severity mix

Critical 0High 1Medium 3Low 0

Severity

All severities4 Critical0 High1 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add SAML SP Single Sign On to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-61979	8.1	0%	Aug 13	WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability Affected: through 5.4.3
CVE-2022-4496	6.1	1%	Jan 30	The SAML SSO Standard WordPress plugin version 16.0.0 before 16.0.8, SAML SSO Premium WordPress plugin version 12.0.0 before 12.1.0 and SAML SSO Premium Multisite WordPress plugin… Affected: 12.0.0 before 12.1.0; 16.0.0 before 16.0.8; 20.0.0 before 20.0.7
CVE-2020-6850	6.1	1%	Feb 17	Utilities.php in the miniorange-saml-20-single-sign-on plugin before 4.8.84 for WordPress allows XSS via a crafted SAML XML Response to wp-login.php Affected: before 4.8.84
CVE-2019-12346	6.1	1%	Jun 24	In the miniOrange SAML SP Single Sign On plugin before 4.8.73 for WordPress, the SAML Login Endpoint is vulnerable to XSS via a specially crafted SAMLResponse XML post Affected: before 4.8.73