{"id":"CVE-2025-7045","aliases":["EUVD-2025-27129","GHSA-whcq-rh5h-j3wh"],"status":"published","title":"Cloud SAML SSO \u003c= 1.0.19 - Missing Authorization to Unauthenticated Identity Provider Deletion via delete_config Action","description":"The Cloud SAML SSO plugin for WordPress is vulnerable to Identity Provider Deletion due to a missing capability check on the delete_config action of the csso_handle_actions() function in all versions up to, and including, 1.0.19. This makes it possible for unauthenticated attackers to delete any configured IdP, breaking the SSO authentication flow and causing a denial-of-service.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00412,"percentile":0.35725,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-306"],"published":"2025-09-06T03:22:36Z","modified":"2026-06-17T10:04:09Z","products":[{"vendor":"cloudinfrastructureservices","product":"cloud saml sso – single sign on login"}],"references":[{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/87099513-d8e2-45e5-b7e6-b46558a10d3b?source=cve"},{"url":"https://plugins.trac.wordpress.org/browser/cloud-sso-single-sign-on/tags/1.0.19/saml-sso-plugin.php"},{"url":"https://wordpress.org/plugins/cloud-sso-single-sign-on/#developers"},{"url":"https://plugins.trac.wordpress.org/browser/cloud-sso-single-sign-on/tags/1.0.19/assets/CSSO_Init.php"},{"url":"https://plugins.trac.wordpress.org/browser/cloud-sso-single-sign-on/tags/1.0.19/assets/base/CSSO_ActionHandler.php"},{"url":"https://plugins.trac.wordpress.org/browser/cloud-sso-single-sign-on/trunk/assets/base/CSSO_ActionHandler.php?rev=3354459#L130"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-7045"},{"url":"https://github.com/advisories/GHSA-whcq-rh5h-j3wh"}],"sources":{"cve":[{"id":"CVE-2025-7045","title":"Cloud SAML SSO \u003c= 1.0.19 - Missing Authorization to Unauthenticated Identity Provider Deletion via delete_config Action","description":"The Cloud SAML SSO plugin for WordPress is vulnerable to Identity Provider Deletion due to a missing capability check on the delete_config action of the csso_handle_actions() function in all versions up to, and including, 1.0.19. This makes it possible for unauthenticated attackers to delete any configured IdP, breaking the SSO authentication flow and causing a denial-of-service.","status":"published","published":"2025-09-06T03:22:36.869Z","modified":"2026-04-08T17:04:58.73Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:32:51.199669Z"}],"euvd":[{"id":"EUVD-2025-27129","description":"The Cloud SAML SSO plugin for WordPress is vulnerable to Identity Provider Deletion due to a missing capability check on the delete_config action of the csso_handle_actions() function in all versions up to, and including, 1.0.19. This makes it possible for unauthenticated attackers to delete any configured IdP, breaking the SSO authentication flow and causing a denial-of-service.","status":"published","published":"2025-09-06T03:22:36Z","modified":"2026-04-08T17:04:58Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T19:24:50.724749Z"}],"ghsa":[{"id":"GHSA-whcq-rh5h-j3wh","title":"The Cloud SAML SSO plugin for WordPress is vulnerable to Identity Provider Deletion due to a...","description":"The Cloud SAML SSO plugin for WordPress is vulnerable to Identity Provider Deletion due to a missing capability check on the delete_config action of the csso_handle_actions() function in all versions up to, and including, 1.0.19. This makes it possible for unauthenticated attackers to delete any configured IdP, breaking the SSO authentication flow and causing a denial-of-service.","status":"published","published":"2025-09-06T06:30:32Z","modified":"2025-09-06T06:30:38Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T15:03:31.03941Z"}],"nvd":[{"id":"CVE-2025-7045","description":"The Cloud SAML SSO plugin for WordPress is vulnerable to Identity Provider Deletion due to a missing capability check on the delete_config action of the csso_handle_actions() function in all versions up to, and including, 1.0.19. This makes it possible for unauthenticated attackers to delete any configured IdP, breaking the SSO authentication flow and causing a denial-of-service.","status":"published","published":"2025-09-06T04:16:06.65Z","modified":"2026-06-17T10:04:09.253Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:11:27.73916Z"}]}}