Frontegg SAML SSO Plugin for WordPress: How Missing Signature Verification Creates an Unauthenticated Admin Takeover Path

CVE-2026-75800, a critical vulnerability with a CVSS score of 9.8, allows unauthenticated attackers to bypass authentication in the Frontegg SAML SSO plugin for WordPress. By exploiting this flaw, an attacker can achieve full administrative takeover of any affected site. The vulnerability affects all versions of the plugin up to and including 1.0.1. The root cause is a failure to implement standard SAML security checks. The plugin does not verify the digital signature of incoming SAML authentication responses, nor does it validate the issuer identifier. Because the plugin accepts these assertions without confirming their origin or integrity, an attacker can forge a SAML assertion to impersonate any existing user, including administrators. Furthermore, the plugin’s auto-provisioning feature allows attackers to create arbitrary new accounts, facilitating persistent unauthorized access.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to Forkast.