How many miniOrange SAML SP Single Sign On CVEs are in CISA KEV?

None of miniOrange SAML SP Single Sign On's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of miniOrange SAML SP Single Sign On are affected?

16 distinct miniOrange SAML SP Single Sign On versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in miniOrange SAML SP Single Sign On CVEs?

miniOrange SAML SP Single Sign On's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-266 (Incorrect Privilege Assignment), CWE-862 (Missing Authorization).

What is the average severity of miniOrange SAML SP Single Sign On CVEs?

The average CVSS base score across miniOrange SAML SP Single Sign On's scored CVEs is 6.1.

RadicalNotion.AI

Log in Start free

miniOrange

5 CVEs

miniOrange SAML SP Single Sign On Vulnerabilities

Name: miniOrange SAML SP Single Sign On vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for SAML SP Single Sign On by miniOrange.

5

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

3

Public exploits

PoC or exploit code

6.1

Avg CVSS

2019–2026

Last updated August 13, 2026

Overview

miniOrange SAML SP Single Sign On has 5 published CVE records since 2019, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 6.1.

This page aggregates every publicly disclosed vulnerability (CVE) affecting miniOrange SAML SP Single Sign On, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of miniOrange SAML SP Single Sign On's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of miniOrange SAML SP Single Sign On's CVEs are currently listed in CISA's KEV catalog.

Public exploits

3

3 of miniOrange SAML SP Single Sign On's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every miniOrange SAML SP Single Sign On version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 4.8.731 CVE
< 4.8.841 CVE
<= 5.0.41 CVE
<= 5.4.31 CVE
>= 5.0.51 CVE
>= 5.4.41 CVE
12.0.0 <= v < 12.1.01 CVE
16.0.0 <= v < 16.0.81 CVE
20.0.0 <= v < 20.0.71 CVE

Fixed in

12.1.01 CVE
16.0.81 CVE
20.0.71 CVE
4.8.731 CVE
4.8.841 CVE
5.0.51 CVE
5.4.41 CVE

Find a version

5 CVEs

Sort

WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability
CVE-2026-61979
Patch
CWE-266
High · CVSS 8.1
EPSS 0.3% (20th pct)2026-08-13
WordPress SAML Single Sign On – SSO Login plugin <= 5.0.4 - Broken Access Control vulnerability
CVE-2023-41873
Patch
CWE-862
Medium · CVSS 4.3
EPSS 0.5% (42th pct)2024-12-13
Medium vulnerability · 2023-01-30
CVE-2022-4496
Public exploit
Patch
Medium · CVSS 6.1
EPSS 0.6% (48th pct)2023-01-30
Medium vulnerability · 2020-02-17
CVE-2020-6850
Public exploit
Patch
CWE-79
Medium · CVSS 6.1
EPSS 1.4% (70th pct)2020-02-17
Medium vulnerability · 2019-06-24
CVE-2019-12346
Public exploit
Patch
CWE-79
Medium · CVSS 6.1
EPSS 1.5% (73th pct)2019-06-24

Common weakness types

The CWE weakness categories most often found in miniOrange SAML SP Single Sign On CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many miniOrange SAML SP Single Sign On CVEs were published each year.

2019

1

2020

1

2023

1

2024

1

2026

1

Other miniOrange products

Browse vulnerabilities for other products by miniOrange.

active directory integration / ldap integration6 CVEs google authenticator6 CVEs miniorange 2fa6 CVEs WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn)6 CVEs WordPress Social Login and Register5 CVEs Malware Scanner4 CVEs miniorange otp verification4 CVEs oauth single sign on4 CVEs

All miniOrange vulnerabilities

Frequently asked questions

Common questions about miniOrange SAML SP Single Sign On vulnerabilities.

How many CVEs does miniOrange SAML SP Single Sign On have?: miniOrange SAML SP Single Sign On has 5 published CVE records since 2019.
How many miniOrange SAML SP Single Sign On CVEs are in CISA KEV?: None of miniOrange SAML SP Single Sign On's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for miniOrange SAML SP Single Sign On vulnerabilities?: Yes — 3 of miniOrange SAML SP Single Sign On's CVEs have a known public exploit.
Which versions of miniOrange SAML SP Single Sign On are affected?: 16 distinct miniOrange SAML SP Single Sign On versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in miniOrange SAML SP Single Sign On CVEs?: miniOrange SAML SP Single Sign On's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-266 (Incorrect Privilege Assignment), CWE-862 (Missing Authorization).
What is the average severity of miniOrange SAML SP Single Sign On CVEs?: The average CVSS base score across miniOrange SAML SP Single Sign On's scored CVEs is 6.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track miniOrange SAML SP Single Sign On vulnerabilities

Monitor new miniOrange SAML SP Single Sign On vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing