critical9.8
CVE-2026-75800
The Frontegg SAML SSO WordPress plugin through 1.0.1 does not verify the signature or issuer of SAML authentication responses before establishing a session, al…
Impact
The Frontegg SAML SSO WordPress plugin through 1.0.1 does not verify the signature or issuer of SAML authentication responses before establishing a session, allowing unauthenticated attackers to log in as any user, including administrators, as well as to create arbitrary accounts.
Affected products
| Product | Affected versions |
|---|---|
| Frontegg SAML SSO WordPress Plugin | through 1.0.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.