project

miniOrange SAML 2.0 Single Sign On for WordPress

WordPress SSO plugin distributed as one slug across seven editions (Free plus six paid) with divergent version lines; affected by the two authentication bypass flaws.

Known aliases

miniOrange SAML 2.0 SSO
miniOrange SAML SSO

Relationships

No evidence-backed relationships are recorded.

Current clusters

build1 distinct publisher

One slug, seven editions: the miniOrange SAML bug that makes published metadata an admin login

The plugin honoured HMAC-SHA1 chosen by the attacker and used the IdP's public RSA key as the shared secret. Free is fixed at 5.4.5, Standard at 17.0.6, under the same slug.

Publishers:dev.to

Reality

Evidence55
Adoption45
Hype gap+15
Incentives50