CVE-2026-19842

Deferred Deferred - Pending Action

SAML Signature Bypass in WordPress SSO Plugin

Publication date: 2026-08-19

Last updated on: 2026-08-26

Assigner: WPScan

Description

The SAML Single Sign On WordPress plugin before 5.4.7 does not verify the signature of a SAML response before storing the certificate it carries, and offers an administrator a one-click control that promotes that stored certificate to the site's trusted signing certificate, allowing unauthenticated attackers to have a certificate of their own trusted and then authenticate as any user, including an administrator.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-08-26

Generated

2026-09-08

AI Q&A

2026-08-19

EPSS Evaluated

2026-09-07

NVD

CVE-2026-19842

EUVD

EUVD-2026-62293

Affected Vendors & Products

Vendor	Product	Version / Range
miniorange	saml_single_sign_on	to 5.4.7 (exc)
wpsecure	saml_single_sign_on	4.8.85
wpsecure	saml_single_sign_on	to 5.4.7 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

Executive Summary

This vulnerability is in the SAML Single Sign On WordPress plugin before version 5.4.7. It allows unauthenticated attackers to bypass authentication by exploiting improper signature verification in SAML responses. Attackers can store a malicious certificate and promote it to the site's trusted signing certificate with a single click, enabling them to authenticate as any user, including administrators.

Detection Guidance

Check the installed version of the SAML Single Sign On WordPress plugin. If it is between 4.8.85 and 5.4.6, the system is vulnerable. Use commands like 'wp plugin list' in WordPress CLI or inspect the plugin files directly.

Impact Analysis

This vulnerability allows attackers to take over administrator accounts without authentication. They can gain full control of the WordPress site, access sensitive data, modify content, install malicious plugins, or perform other administrative actions.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements for GDPR, HIPAA, and other regulations. It may result in data breaches, unauthorized data exposure, and failure to meet security and privacy standards.

Mitigation Strategies

Update the SAML Single Sign On plugin to version 5.4.7 or later immediately. Remove any untrusted certificates from the plugin's settings and revoke unauthorized access.

Hi! I’m here to help you understand CVE-2026-19842. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70