VulnSocial

CVE-2026-82842

LOWCVSS 8.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for linking an incoming single sign-on identity to a WordPress account, always resolving the identity by login name whatever the site has chosen, which allows an attacker who can have the site's identity provider assert a login name of their choosing to authenticate as any account, including an administrator, without proving ownership of that account.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-269

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-20: 109-20
Referenced assets1 URL
By indicator
Full discourse1 post
  • ADK Cyber@ADKCyber

    CVE-2026-82842 (CVSS 8.1): SAML Single Sign On WordPress plugin <6.0.0 fails to enforce configured account linking. Update immediately if in use. https://nvd.nist.gov/vuln/detail/CVE-2026-82842 via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/qCz5Z2Darj

    0000035
    96 followersView on X

Explore more

Back to dashboard