WordPress security by component

Login using WordPress Users ( WP as SAML IDP )

Plugin description

Login using WordPress Users ( WP as SAML IDP ) is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Nov 16, 2024; the highest CVE/CNA score is 7.2.

Plugin slug: miniorange-wp-as-saml-idp

Latest vulnerability

CVE-2024-9887: Login using WordPress Users ( WP as SAML IDP ): SQL injection

Login using WordPress Users ( WP as SAML IDP ) is affected by SQL injection. Exploitation requires at least administrator-level access. A successful request can alter database queries and expose or modify WordPress data.

PublishedNov 16, 2024

Safe version guidanceSee mitigation notes

		Safe version
Nov 16, 2024	CVE-2024-9887 Login using WordPress Users ( WP as SAML IDP ): SQL injection Login using WordPress Users ( WP as SAML IDP ) is affected by SQL injection. Exploitation requires at least administrator-level access. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE7.2 NVDPending