Skip to main content

Software intelligence

Miniorange Saml 20 Single Sign On vulnerabilities

11 tracked advisories · slug miniorange-saml-20-single-sign-on

Important: Miniorange Saml 20 Single Sign On appearing in this catalog does not mean your website is affected. Exposure depends on your installed version. How SiteRespond intelligence works

Tracked advisories

11

Latest advisory

29 August 2026

CISA KEV matches

0

In this WordPress feed

WordPress slug

miniorange-saml-20-single-sign-on

Plugin

What this means for Miniorange Saml 20 Single Sign On

This catalog lists 11 known advisories affecting Miniorange Saml 20 Single Sign On. The most recent was published on 29 August 2026. If you use this software, compare your installed version against the affected ranges on each advisory and update to a fixed release outside those ranges. SiteRespond Defence checks your actual installed version when the plugin is connected — listing here does not by itself mean your site is vulnerable.

Latest issues

  • SAML Single Sign On <= 5.4.6 - Unauthenticated Authentication Bypass via X.509 Certificate Poisoning

    May allow access to accounts or admin areas without valid credentials.

    Published 29 August 2026

  • SAML Single Sign On – SSO Login 4.8.85-5.4.6 - Unauthenticated Privilege Escalation

    May allow a lower-privilege user to perform actions reserved for administrators.

    Published 19 August 2026

  • SAML Single Sign On – SSO Login <= 5.4.3 - Unauthenticated Privilege Escalation

    May allow a lower-privilege user to perform actions reserved for administrators.

    Published 13 August 2026

Vulnerability types

  • Authentication bypass3
  • Cross-site scripting3
  • Privilege escalation2
  • CSRF1

Authentication (inferred from titles)

  • Unauthenticated5
  • Authenticated0
  • Unspecified6

Advisory history

Known Miniorange Saml 20 Single Sign On advisories published by month.

All advisories

Check whether your installed version is affected

SiteRespond Defence matches your installed Miniorange Saml 20 Single Sign On version against this catalog when the Defence plugin is connected to your WordPress site.