Vulnerabilities

TI-2022-04110 CVE-2022-4496 · GHSA-rcxh-cxjx-w475

miniOrange WordPress SAML SSO multiple versions - Open Redirect in SSO login

LOW 28

The SAML SSO Standard WordPress plugin version 16.0.0 before 16.0.8, SAML SSO Premium WordPress plugin version 12.0.0 before 12.1.0 and SAML SSO Premium Multisite WordPress plugin version 20.0.0 before 20.0.7 does not va…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0061 Published 2023-01-30 Fixed in 16.0.8, 12.1.0 +1

TI-2020-05556 CVE-2020-6850 · GHSA-xhv2-m579-hgcc

Utilities.php in the miniorange-saml-20-single-sign-on plugin before 4.8.84 for WordPress…

LOW 30

Utilities.php in the miniorange-saml-20-single-sign-on plugin before 4.8.84 for WordPress allows XSS via a crafted SAML XML Response to wp-login.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01376 Published 2020-02-17 No fix listed CWE-79

TI-2019-09196 CVE-2019-12346 · GHSA-m9fc-26r9-rcr7

In the miniOrange SAML SP Single Sign On plugin before 4.8.73 for WordPress, the SAML…

LOW 29

In the miniOrange SAML SP Single Sign On plugin before 4.8.73 for WordPress, the SAML Login Endpoint is vulnerable to XSS via a specially crafted SAMLResponse XML post.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01066 Published 2019-06-24 No fix listed CWE-79

Vulnerabilities

Filters

miniOrange WordPress SAML SSO multiple versions - Open Redirect in SSO login

Utilities.php in the miniorange-saml-20-single-sign-on plugin before 4.8.84 for WordPress…

In the miniOrange SAML SP Single Sign On plugin before 4.8.73 for WordPress, the SAML…