Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior

Críticas / altas1447▲ 86 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-77998	Aplazada	Crítica (10)	0.60%	—	Miniorange Saml SSO^AI Miniorange Saml SP Single Sign ON Login With Adfs^AI Miniorange Saml SP Single Sign ON Saml SSO Login With Google Apps^AI Joomla^AI	25/8/2026	8/9/2026	Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO < 11.0.2, SAML SP Single Sign On – Login with ADFS < 6.4, SAML SP Single Sign On – SAML SSO login with Google Apps < 6.4 - This is due to the mo_saml_validate_signature() function performing a…
CVE-2026-61979	Aplazada	Alta (8.1)	0.37%	—	Miniorange Saml SP Single Sign ON^AI	13/8/2026	14/8/2026	Unauthenticated Privilege Escalation in SAML SP Single Sign On <= 5.4.3 versions.
CVE-2025-24749	Aplazada	Alta (7.1)	0.13%	—	Overt Software Solutions LTD Ezpz Saml SP Single Sign ON^AI	31/1/2025	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Overt Software Solutions LTD EZPZ SAML SP Single Sign On (SSO) allows Cross Site Request Forgery. This issue affects EZPZ SAML SP Single Sign On (SSO): from n/a through 1.2.5.
CVE-2023-41873	Aplazada	Media (4.3)	0.50%	—	Miniorange Saml SP Single Sign ON^AI	13/12/2024	17/6/2026	Missing Authorization vulnerability in miniOrange SAML SP Single Sign On allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SAML SP Single Sign On: from n/a through 5.0.4.
CVE-2022-4496	Modificada	Media (6.1)	0.61%	—	Miniorange Saml SP Single Sign ON	30/1/2023	17/6/2026	The SAML SSO Standard WordPress plugin version 16.0.0 before 16.0.8, SAML SSO Premium WordPress plugin version 12.0.0 before 12.1.0 and SAML SSO Premium Multisite WordPress plugin version 20.0.0 before 20.0.7 does not validate that the redirect parameter to its SSO login endpoint points to an internal site URL, making…
CVE-2020-6850	Modificada	Media (6.1)	1.4%	—	Miniorange Saml SP Single Sign ON	17/2/2020	17/6/2026	Utilities.php in the miniorange-saml-20-single-sign-on plugin before 4.8.84 for WordPress allows XSS via a crafted SAML XML Response to wp-login.php. This is related to the SAMLResponse and RelayState variables, and the Destination parameter of the samlp:Response XML element.
CVE-2019-12346	Modificada	Media (6.1)	1.1%	—	Miniorange Saml SP Single Sign ON	24/6/2019	17/6/2026	In the miniOrange SAML SP Single Sign On plugin before 4.8.73 for WordPress, the SAML Login Endpoint is vulnerable to XSS via a specially crafted SAMLResponse XML post.