CVE-2026-75800 in SAML SSO PluginИнформация

Сводка

по MITRE • 12.09.2026

The Frontegg SAML SSO WordPress plugin through 1.0.1 does not verify the signature or issuer of SAML authentication responses before establishing a session, allowing unauthenticated attackers to log in as any user, including administrators, as well as to create arbitrary accounts.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Ответственный

WPScan

Резервировать

18.08.2026

Раскрытие

12.09.2026

Модерация

принято

Вход

VDB-403031

EPSS

0.00000

KEV

Нет

Деятельности

Очень низкий

Сектор

Hostingprovider

Источники

Interested in the pricing of exploits?

See the underground prices here!