The Frontegg SAML SSO WordPress plugin through 1.0.1 does not verify the signature or issuer of SAML authentication responses before establishing a session, allowing unauthenticated attackers to log in as any user, including administrators, as well as to create arbitrary accounts.
2026年9月12日
CVE-2026-75800 – The Frontegg SAML SSO WordPress plugin through 1.0.1 does not verify the signature or issu
📑 文章目录



