{
 "id": "WPSEC-2026-2363",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2363/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2363/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2363/index.md",
 "title": "OneLogin SAML SSO <= 3.7.0 - Unauthenticated Open Redirect via 'target' and 'redirect_to' Parameters",
 "description": "The OneLogin SAML SSO plugin for WordPress is vulnerable to Open Redirect via the 'target' and 'redirect_to' parameters of the SSO endpoint in version 3.7.0 due to insufficient validation of the redirect URL when the user is already logged in. This makes it possible for unauthenticated attackers to redirect logged-in users to potentially malicious sites if they can successfully trick them into clicking a crafted link.",
 "plugin": {
  "slug": "onelogin-saml-sso",
  "name": "OneLogin SAML SSO",
  "full_name": "OneLogin SAML SSO",
  "wordpress_org": "https://wordpress.org/plugins/onelogin-saml-sso/",
  "advisories_url": "https://wpsec.com/vuln/plugin/onelogin-saml-sso/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/onelogin-saml-sso"
 },
 "type": "REDIRECT",
 "cwe": [
  "CWE-601"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 6.1,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": "3.7.0",
    "from_inclusive": true,
    "to": "3.7.1",
    "to_inclusive": false
   }
  ],
  "text": [
   "from 3.7.0 before 3.7.1"
  ]
 },
 "introduced_in": "3.7.0",
 "fixed_in": "3.7.1",
 "remediation": "Update to 3.7.1 or later.",
 "fix_released": "2026-10-31T23:23:41+00:00",
 "published": "2026-11-03T14:48:33+00:00",
 "updated": "2026-11-03T13:40:33.329318+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2363/",
  "https://plugins.svn.wordpress.org/onelogin-saml-sso/tags/3.7.1/",
  "https://wordpress.org/plugins/onelogin-saml-sso/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/onelogin-saml-sso",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "None seen",
  "as_of": "2026-11-03"
 }
}