https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T14:27:29.118551+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-356433 EUVD-2026-356433 2026-10-09T14:27:29.166274+00:00 EUVD-2026-356433 https://cve.radiocsirt.org/vuln/fkie_cve-2026-19842 fkie_cve-2026-19842 2026-10-09T14:27:29.166313+00:00

The SAML Single Sign On WordPress plugin before 5.4.7 does not verify the signature of a SAML response before storing the certificate it carries, and offers an administrator a one-click control that promotes that stored certificate to the site's trusted signing certificate, allowing unauthenticated attackers to have a certificate of their own trusted and then authenticate as any user, including an administrator.

 https://cve.radiocsirt.org/vuln/ghsa-qj54-25r3-fmh2 GHSA-qj54-25r3-fmh2 2026-10-09T14:27:29.166358+00:00

The SAML Single Sign On WordPress plugin before 5.4.7 does not verify the signature of a SAML response before storing the certificate it carries, and offers an administrator a one-click control that promotes that stored certificate to the site's trusted signing certificate, allowing unauthenticated attackers to have a certificate of their own trusted and then authenticate as any user, including an administrator.