CVE-2026-82842— SAML Single Sign On < 6.0.0 - Unauthenticated Privilege Escalation via Account Matching
Quick assessment
Affected
Unknown SAML Single Sign On
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SAML Single Sign On WordPress 插件在 6.0.0 版本之前，未遵循其配置的身份链接规则，即无论站点管理员如何配置，该插件始终仅通过登录名（login name）来将传入的单点登录（SSO）身份关联到 WordPress 账户。这一缺陷使得攻击者能够通过该站点的身份提供商（IdP）任意指定一个登录名进行断言，从而以任意账户（包括管理员账户）的身份进行认证，而无需证明对该账户的所有权。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-82842
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SAML Single Sign On < 6.0.0 - Unauthenticated Privilege Escalation via Account Matching
Source: CVE Program / CVE List V5
Vulnerability Description
The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for linking an incoming single sign-on identity to a WordPress account, always resolving the identity by login name whatever the site has chosen, which allows an attacker who can have the site's identity provider assert a login name of their choosing to authenticate as any account, including an administrator, without proving ownership of that account.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Unknown | SAML Single Sign On | 4.8.43 ~ 6.0.0 | - |
|
II. Public POCs for CVE-2026-82842
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-82842
请登录查看更多情报信息。
Other References for CVE-2026-82842 (1)
-
🔗 SAML Single Sign On < 6.0.0 – Unauthenticated Privilege Escalation via Account Matching | CVE 2026-82842 | Plugin Vulnerabilities exploit vdb-entry technical-description
Same Patch Batch · Unknown · 2026-09-20 · 20 CVEs total
| CVE-2026-84223 | Kirki 6.0.0 - 6.3.0 - Author+ Stored XSS via Unsanitized SVG Upload | |
| CVE-2026-14844 | Master Slider <= 3.11.2 - Contributor+ Stored XSS via ms_slider Shortcode Attributes | |
| CVE-2026-16542 | Import and export users and customers < 2.4.5 - Admin+ SSRF via bp_avatar | |
| CVE-2026-81650 | NextGEN Gallery < 4.5.0 - Authenticated Arbitrary File Upload via ZIP Import | |
| CVE-2026-81652 | NextGEN Gallery < 4.5.0 - Contributor+ Image Metadata Disclosure via IDOR | |
| CVE-2026-81653 | NextGEN Gallery < 4.5.0 - Authenticated Arbitrary Gallery Image Deletion via IDOR | |
| CVE-2026-81654 | NextGEN Gallery < 4.5.0 - Authenticated Plugin Image Settings Update | |
| CVE-2026-81651 | NextGEN Gallery < 4.5.0 - Authenticated Cross-Gallery Settings Modification via IDOR | |
| CVE-2026-87068 | Forminator Forms < 1.57.2.1 - Authenticated Privilege Escalation via Quiz Lead-Form Import | |
| CVE-2026-87067 | Forminator Forms < 1.57.2.1 - Authenticated RCE via XML-RPC PHP Object Injection | |
| CVE-2026-92540 | Import and export users and customers < 2.5.2 - Custom Role Privilege Escalation to Admini | |
| CVE-2026-85017 | Unlimited Elements For Elementor < 2.0.20 - Subscriber+ PHP Object Injection | |
| CVE-2026-87840 | Tripzzy < 1.5.1 - Unauthenticated Booking Data Tampering | |
| CVE-2026-87839 | Tripzzy < 1.5.1 - Unauthenticated Arbitrary Comment Deletion | |
| CVE-2026-92410 | Sign-up Sheets < 2.4.0 - Arbitrary Sign-up Deletion via CSRF | |
| CVE-2026-92423 | Meow Gallery < 5.5.5 - Author+ Draft and Private Post Disclosure via fetch_posts | |
| CVE-2026-92422 | Meow Gallery < 5.5.5 - Unauthenticated Arbitrary Shortcode Execution via load_gallery_coll | |
| CVE-2026-92965 | TikTok 1.2.0 - 1.4.1 - Unauthenticated OAuth Code Redemption | |
| CVE-2026-92541 | Import and export users and customers < 2.5.2 - Custom Role Privilege Escalation to Admini |
IV. Related Vulnerabilities
Same vendor: Unknown
-
CVE-2026-92540
Import and export users and customers < 2.5.2 - Custom Role -
CVE-2026-92541
Import and export users and customers < 2.5.2 - Custom Role -
CVE-2026-92965
TikTok 1.2.0 - 1.4.1 - Unauthenticated OAuth Code Redemption -
CVE-2026-92422
Meow Gallery < 5.5.5 - Unauthenticated Arbitrary Shortcode E -
CVE-2026-92423
Meow Gallery < 5.5.5 - Author+ Draft and Private Post Disclo
V. Comments for CVE-2026-82842
No comments yet