Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-04
Miniorange Saml 20 Single Sign On - Security Vulnerability (CVE-2026-62126)
Allocation of Resources Without Limits or Throttling vulnerability in miniOrange SAML SP Single Sign On miniorange-saml-20-single-sign-on allows HTTP DoS.This issue affects SAML SP Single Sign On: from n/a through 6.1.0.
PLUGIN
Miniorange Saml 20 Single Sign On
CVE-2026-62126
Risk Score
Threat Entry
Updated 2026-10-24
Miniorange Saml 20 Single Sign On - Privilege Escalation (CVE-2026-61979)
Unauthenticated Privilege Escalation in SAML SP Single Sign On
PLUGIN
Miniorange Saml 20 Single Sign On
CVE-2026-61979
Risk Score
Threat Entry
Updated 2026-06-17
Miniorange Saml 20 Single Sign On - Cross-Site Scripting (XSS) (CVE-2020-6850)
Utilities.php in the miniorange-saml-20-single-sign-on plugin before 4.8.84 for WordPress allows XSS via a crafted SAML XML Response to wp-login.php. This is related to the SAMLResponse and RelayState variables, and the Destination parameter of the samlp:Response XML element.
PLUGIN
Miniorange Saml 20 Single Sign On
CVE-2020-6850
Risk Score