HIGH CWE-266
CVE-2026-61979
WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability
miniOrange·SAML SP Single Sign On
8.1/ 10
CVSS 3.1
High severity
0.42%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 37% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
- Published
- Aug 13, 2026
- Updated
- Aug 13, 2026
- First covered
- Aug 25, 2026
- Latest story
- 3 months ago
Summary
Unauthenticated Privilege Escalation in SAML SP Single Sign On <= 5.4.3 versions.
CWE-266Incorrect Privilege Assignment
Attack profile
Attack vectorNetwork
ComplexityHigh
PrivilegesNone
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HAffected products
- miniOrange SAML SP Single Sign Onn/a to 5.4.3