CyberRota Analysis
AI-GeneratedThe SAML Single Sign On WordPress plugin prior to version 5.4.7 is vulnerable due to its failure to verify the signature of SAML responses, allowing unauthenticated attackers to promote their own certificates to trusted status. This flaw enables attackers to authenticate as any user, including administrators, potentially leading to unauthorized access and control over the site. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk of exploitation.
Original NVD Description
The SAML Single Sign On WordPress plugin before 5.4.7 does not verify the signature of a SAML response before storing the certificate it carries, and offers an administrator a one-click control that promotes that stored certificate to the site's trusted signing certificate, allowing unauthenticated attackers to have a certificate of their own trusted and then authenticate as any user, including an administrator.