WordPress SAML SP Single Sign On plugin denial of service flaw

Summary

The WordPress SAML login plugin has no limits on resource use, so HTTP requests can stop the site. Versions through 6.1.0 are affected.

What to do

Update to version 6.2.0 or later.

Products and platforms

• SAML SP Single Sign On

CVE IDs

• CVE-2026-62126 (opens in a new tab)

Sources

• CVE record: cve.org (opens in a new tab)

Times

First published 2026-11-04 08:00 UTC

First seen 2026-11-09 15:20 UTC