WordPress Frontegg SAML SSO Plugin Login Bypass

The Frontegg SAML SSO WordPress plugin, up to version 1.0.1, has a critical security flaw. It does not validate the signature or issuer of SAML authentication responses, allowing unauthorized attackers to log in as any user, including administrators, and create new accounts.

This vulnerability affects all versions of the Frontegg SAML SSO WordPress plugin up to and including 1.0.1.