Vulnerabilities / Login using WordPress Users ( WP as SAML IDP )
Login using WordPress Users ( WP as SAML IDP ) vulnerabilities
Advisories WPSec published for SAML IDP (Identity Provider) – Login with Website Users. Other sources may list more. Its attack surface: Login using WordPress Users ( WP as SAML IDP ) on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-14 | WPSEC-2026-0873 | Login using WordPress Users ( WP as SAML IDP ) <= 2.0.1 - Unauthenticated Denial of Service via SAMLRequest Decompression | Medium 5.3 | 2.0.2 |
| 2026-10-14 | WPSEC-2026-0872 | Login using WordPress Users ( WP as SAML IDP ) <= 2.0.1 - Unauthenticated Denial of Service via SP Tracking Cookie | High 7.5 | 2.0.2 |
License: CC BY 4.0