Frontegg SAML SSO <= 1.0.1 - Authentication Bypass to Admin
criticalThe Frontegg SAML SSO plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.1. This is due to the plugin not verifying SAML signatures. This makes it possible for unauthenticated attackers to bypass SAML authentication and log in as other users, including administrators.
- CVSS:
- 9.8 (Wordfence)
- Affected:
- up to 1.0.1
- Fix:
- No patched version reported
- Disclosed:
- Sep 10, 2026