WordPress Single Sign-On (SSO) - Multisite Enterprise

WordPress Single Sign-On (SSO) - Multisite Enterprise has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Incorrect Authorization, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for WordPress Single Sign-On (SSO) - Multisite Enterprise has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each.

01234567891011.06.2025Today11.06.20255.3WordPress Single Sign-On (SSO) - Multiple Versions - Incorrect Authorization to Sensitive Information Exposure CVSS 5.3 · 11.06.202509.07.20265.3WordPress Single Sign-On (SSO) - Multisite Premium <= 38.5.8 - Missing Authorization CVSS 5.3 · 09.07.2026

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all WordPress Single Sign-On (SSO) - Multisite Enterprise vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2026-57807

WordPress Single Sign-On (SSO) - Multisite Premium <= 38.5.8 - Missing Authorization

Read the full analysis

Vulnerability Records

2 records
Showing 1–2 of 2 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C