CRITICAL
CVE-2026-75800
CVSS
9.8
Description
The Frontegg SAML SSO WordPress plugin through 1.0.1 does not verify the signature or issuer of SAML authentication responses before establishing a session, allowing unauthenticated attackers to log in as any user, including administrators, as well as to create arbitrary accounts.
Weakness (CWE)
CWE-287
Improper Authentication
EPSS Score
0.42%
Probability of exploitation in next 30 days
35.6th percentile
Base CVE data derived from NVD (public domain). Enrichment by
dbcve.org
(CC-BY-4.0). Fetched via API.