CVE-2026-75800: Frontegg SAML SSO <= 1.0.1 - Unauthenticated Account Takeover via Unverified SAMLResponse

Q: What does an attacker need to exploit this issue?

An attacker only needs to submit a crafted SAML authentication response. The issue is unauthenticated because the plugin does not verify the response signature or issuer before creating a session.

Q: What level of access can exploitation provide?

An attacker can log in as any user, including an administrator. They can also create arbitrary accounts.

Q: Which plugin versions are affected?

Frontegg SAML SSO for WordPress through version 1.0.1 is affected.

Published Sep 12, 2026

Updated

The Frontegg SAML SSO WordPress plugin through 1.0.1 does not verify the signature or issuer of SAML authentication responses before establishing a session, allowing unauthenticated attackers to log in as any user, including administrators, as well as to create arbitrary accounts.

Affected Software

1 affected component

Frontegg SAML SSO WordPress plugin<=1.0.1

Event History

Sep 12, 2026

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

An attacker only needs to submit a crafted SAML authentication response. The issue is unauthenticated because the plugin does not verify the response signature or issuer before creating a session.

What level of access can exploitation provide?

An attacker can log in as any user, including an administrator. They can also create arbitrary accounts.

Which plugin versions are affected?

Frontegg SAML SSO for WordPress through version 1.0.1 is affected.