CVE-2026-62126: WordPress SAML SP Single Sign On plugin <= 6.1.0 - Denial of Service Attack vulnerability

Q: Who can exploit this issue?

The CVSS vector indicates it is remotely exploitable over the network, requires no privileges, no user interaction, and has low attack complexity.

Q: What is the likely impact?

The reported impact is denial of service through uncontrolled resource allocation or insufficient throttling. The CVSS vector reports high availability impact and no confidentiality or integrity impact.

Q: Which plugin versions are affected?

The affected range is reported as all versions through 6.1.0. No lower affected version is specified.

Published Nov 4, 2026

Updated

Allocation of Resources Without Limits or Throttling vulnerability in miniOrange SAML SP Single Sign On miniorange-saml-20-single-sign-on allows HTTP DoS.This issue affects SAML SP Single Sign On: from n/a through 6.1.0.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress SAML SP Single Sign On to a version that resolves this vulnerability.
Fixed in 6.2.0

Event History

Nov 4, 2026

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·08:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The CVSS vector indicates it is remotely exploitable over the network, requires no privileges, no user interaction, and has low attack complexity.

What is the likely impact?

The reported impact is denial of service through uncontrolled resource allocation or insufficient throttling. The CVSS vector reports high availability impact and no confidentiality or integrity impact.

Which plugin versions are affected?

The affected range is reported as all versions through 6.1.0. No lower affected version is specified.

CVE-2026-62126: WordPress SAML SP Single Sign On plugin <= 6.1.0 - Denial of Service Attack vulnerability

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the likely impact?

Which plugin versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the likely impact?

Which plugin versions are affected?