Frontegg SAML SSO Plugin for WordPress: How Missing Signature Verification Creates an Unauthenticated Admin Takeover Path

CVE-2026-75800, a critical vulnerability with a CVSS score of 9.8, allows unauthenticated attackers to bypass authentication in the Frontegg SAML SSO plugin for WordPress. By exploiting this flaw, an attacker can achieve full administrative takeover of any affected site. The vulnerability affects all versions of the plugin up to and including 1.0.1. The root cause is a failure to implement standard SAML security checks. The plugin does not verify the digital signature of incoming SAML authentication responses, nor does it validate the issuer identifier.

Source: Forkast