Unauthorized Data Modification in Cloud SAML SSO Plugin for WordPress

CVE-2025-7040

What is CVE-2025-7040?

The Cloud SAML SSO plugin for WordPress is susceptible to unauthorized data modification due to an absence of capability checks in the 'set_organization_settings' action of the csso_handle_actions() function. This vulnerability impacts all versions prior to and including 1.0.19. It allows unauthenticated attackers to manipulate critical configuration settings by directly altering POST parameters, such as toggling signing and encryption options. This can disrupt the single sign-on (SSO) process, leading to denial-of-service scenarios. Mitigation steps should be taken immediately to secure your WordPress installation.

References