Vulnerability Inventory and Version Detection

One slug, seven editions: the miniOrange SAML bug that makes published metadata an admin login

The plugin honoured HMAC-SHA1 chosen by the attacker and used the IdP's public RSA key as the shared secret. Free is fixed at 5.4.5, Standard at 17.0.6, under the same slug.