CVE-2026-61979

HighCVSS 8.1

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

20th percentile - higher than 20% of all known CVEs

The SAML SP Single Sign On plugin versions up to 5.4.3 have a vulnerability that allows unauthenticated users to escalate privileges.

An attacker can gain administrator or other elevated privileges, potentially leading to full control over the system.

Update the SAML SP Single Sign On plugin to the latest version that addresses this vulnerability.

Original NVD description (English source)

Unauthenticated Privilege Escalation in SAML SP Single Sign On <= 5.4.3 versions.