Miniorange
Miniorange Saml SP Single Sign ON: vulnerabilidades y CVE
Miniorange Saml SP Single Sign ON tiene 5 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE5
Últimos 12 meses1
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-61979 | Alta (8.1) | 0.37% | — | 13 ago 2026 | Unauthenticated Privilege Escalation in SAML SP Single Sign On <= 5.4.3 versions. |
| CVE-2023-41873 | Media (4.3) | 0.50% | — | 13 dic 2024 | Missing Authorization vulnerability in miniOrange SAML SP Single Sign On allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SAML SP Single Sign On: from n/a through 5.0.4. |
| CVE-2022-4496 | Media (6.1) | 0.61% | — | 30 ene 2023 | The SAML SSO Standard WordPress plugin version 16.0.0 before 16.0.8, SAML SSO Premium WordPress plugin version 12.0.0 before 12.1.0 and SAML SSO Premium Multisite WordPress plugin version 20.0.0 before 20.0.7 does not… |
| CVE-2020-6850 | Media (6.1) | 1.4% | — | 17 feb 2020 | Utilities.php in the miniorange-saml-20-single-sign-on plugin before 4.8.84 for WordPress allows XSS via a crafted SAML XML Response to wp-login.php. This is related to the SAMLResponse and RelayState variables, and the… |
| CVE-2019-12346 | Media (6.1) | 1.1% | — | 24 jun 2019 | In the miniOrange SAML SP Single Sign On plugin before 4.8.73 for WordPress, the SAML Login Endpoint is vulnerable to XSS via a specially crafted SAMLResponse XML post. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.
Otros productos de Miniorange
Miniorange 2FA · 12Google Authenticator · 7Oauth Single Sign ON · 7Active Directory Integration / Ldap Integration · 6Malware Scanner · 5OTP Verification With Firebase · 4Wordpress Social Login AND Register · 4Wordpress Social Login AND Register (discord, Google, Twitter, Linkedin) · 3Discord Integration · 3Custom API FOR WP · 2OTP Verification · 2Page Restriction · 2