SAML Authentication Flaw in Frontegg WordPress Plugin Allows Unauthorized Access
CVE-2026-75800
Currently unrated
Key Information:
- Vendor
WordPress
- Status
- Vendor
- CVE Published:
- 12 September 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-75800?
The Frontegg SAML SSO plugin for WordPress, up to version 1.0.1, contains a significant vulnerability that fails to properly validate the signature and issuer of SAML authentication responses. This oversight permits malicious actors to gain unauthorized access to user accounts, including those with administrative privileges. Furthermore, attackers can exploit this vulnerability to create arbitrary accounts on the platform, posing a serious security risk.
Affected Version(s)
Frontegg SAML SSO 0 <= 1.0.1
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.