Beveiligingsadvies

CVE-2026-75800

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-12 06:00:07
Laatst bijgewerkt 2026-09-12 15:36:38
Toegewezen door WPScan
CVSS-score 9.8
Status PUBLISHED

Beschrijving

The Frontegg SAML SSO WordPress plugin through 1.0.1 does not verify the signature or issuer of SAML authentication responses before establishing a session, allowing unauthenticated attackers to log in as any user, including administrators, as well as to create arbitrary accounts.