CVE-2026-61979CWE-266

CVE-2026-61979

High · published August 13, 2026

CVSS v3.1

8.1

EPSS

0%

Percentile

35.6

In the wild

Unconfirmed

What it is

Unauthenticated Privilege Escalation in SAML SP Single Sign On <= 5.4.3 versions.

The record

Technical detail

CVSS v3.1: 8.1 · HIGH
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00424 · 35.6th percentile
Weakness: CWE-266 · Incorrect Privilege Assignment
Published: 2026-08-13T18:17Z

References (1)

https://patchstack.com/database/wordpress/plugin/miniorange-saml-20-single-sign-on/vulnerability/wordpress-saml-sp-single-sign-on-plugin-5-4-3-privilege-escalation-vulnerability?_s_id=cve · [email protected]

EPSS history

Timeline

13 AUG 13:36Z
WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability
cvelistv5