WordPress miniorange-saml-20-single-sign-on Unauthenticated Administrator Account Takeover via SAML Trust Anchor Overwrite (CVE-2026-19842)

Vulnerability Overview Vulnerability Name: SAML Single Sign On 4.8.85 - 5.4.6 - Unauthenticated Administrator Account Takeover via SAML Trust Anchor Overwrite Description: This plugin fails to validate the SAML response signature before storing the certificate it carries. It provides a one-click control that promotes the stored certificate to the site's trusted signature certificate. This allows an unauthenticated attacker to obtain a trusted certificate and then authenticate as any user, including administrators. CVE ID: CVE-2026-19842 Classification: - Type: AUTHBYPASS - OWASP Top 10: A2: Broken Authentication and Session Management - CWE: CWE-287 - CVSS: 8.8 (high) Affected Scope Affected Plugin: - Plugin Name: miniorange-saml-20-single-sign-on - Fixed Version: 5.4.7 Remediation Fixed Version: Upgrade to version 5.4.7 or higher. Timeline Public Release Date: 2026-08-17 Added Date: 2026-08-17 Last Updated: 2026-08-18 Additional Information Original Researcher: Suhayb Ahmed Submitter: Suhayb Ahmed Verification Status: Yes WPVDB ID: 7b79d86e-d3f8-4d4f-929b-fd00540cc00f Related Vulnerabilities 2024-11-14: Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.11.1 - Authentication Bypass 2023-01-27: ContentStudio < 12.6 - Authorisation Bypass 2025-05-06: PepoDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Authentication Bypass to Account Takeover 2022-06-20: WP OAuth Server ( Login with WordPress ) < 4.0.1 - Authentication Bypass 2026-05-14: Receive Notifications After Form Submitting – Form Notify for Any Forms < 1.1.1 - Unauthenticated Authentication Bypass via LINE OAuth Callback POC Code POC Code: No specific POC code is provided in the page, but it mentions that the POC will be demonstrated on September 17, 2026, to give users time to update.

Goal Reached Thanks to every supporter — we hit 100%!

WordPress miniorange-saml-20-single-sign-on Unauthenticated Administrator Account Takeover via SAML Trust Anchor Overwrite (CVE-2026-19842)

More from this source