Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-41873 EUVD-2023-46364GHSA-5px8-j6f2-cwm9

WordPress SAML Single Sign On – SSO Login plugin <= 5.0.4 - Broken Access Control vulnerability

Published Dec 13, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: miniOrange Product: SAML SP Single Sign On

Description

Missing Authorization vulnerability in miniOrange SAML SP Single Sign On allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SAML SP Single Sign On: from n/a through 5.0.4.

Affected products

VendorProductAffectedFixed
miniOrange SAML SP Single Sign On ≤ 5.0.4 —

References