https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T11:34:17.088906+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-19842 fkie_cve-2026-19842 2026-09-29T11:34:17.120384+00:00

The SAML Single Sign On WordPress plugin before 5.4.7 does not verify the signature of a SAML response before storing the certificate it carries, and offers an administrator a one-click control that promotes that stored certificate to the site's trusted signing certificate, allowing unauthenticated attackers to have a certificate of their own trusted and then authenticate as any user, including an administrator.

 https://vulnerability.circl.lu/vuln/ghsa-qj54-25r3-fmh2 GHSA-qj54-25r3-fmh2 2026-09-29T11:34:17.120502+00:00

The SAML Single Sign On WordPress plugin before 5.4.7 does not verify the signature of a SAML response before storing the certificate it carries, and offers an administrator a one-click control that promotes that stored certificate to the site's trusted signing certificate, allowing unauthenticated attackers to have a certificate of their own trusted and then authenticate as any user, including an administrator.