Vulnerability Bulletins |
CVE-2025-7045 |
|
| Affected software | WORDPRESS |
| The Cloud SAML SSO plugin for WordPress is vulnerable to Identity Provider Deletion due to a missing capability check on the delete_config action of the csso_handle_actions() function in all versions up to, and including, 1.0.19. This makes it possible for unauthenticated attackers to delete any configured IdP, breaking the SSO authentication flow and causing a denial-of-service. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2025-7045 | |