What is GHSA-97p7-8jv8-2rmm?

GHSA-97p7-8jv8-2rmm is a security advisory published by GitHub Security Advisories with Critical severity. The Frontegg SAML SSO WordPress plugin through 1.0.1 does not verify the signature or issuer of...

Which CVE IDs does GHSA-97p7-8jv8-2rmm cover?

GHSA-97p7-8jv8-2rmm covers the following CVE IDs: CVE-2026-75800. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-97p7-8jv8-2rmm?

GHSA-97p7-8jv8-2rmm has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-97p7-8jv8-2rmmCriticalCVSS 9.8

The Frontegg SAML SSO WordPress plugin through 1.0.1 does not verify the signature or issuer of...

Vendor

GitHub Security Advisories

Published

September 12, 2026

Last Modified

September 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-75800 →

📋 Description

The Frontegg SAML SSO WordPress plugin through 1.0.1 does not verify the signature or issuer of SAML authentication responses before establishing a session, allowing unauthenticated attackers to log in as any user, including administrators, as well as to create arbitrary accounts.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-75800
https://wpscan.com/vulnerability/be658aa5-8f7f-4938-bf13-b2e6ed3dcf89
https://github.com/advisories/GHSA-97p7-8jv8-2rmm