CVE-2025-7040 Missing authorization in Cloud SAML SSO – Single Sign On Login
Unauthenticated attackers can modify SSO settings due to missing capability checks, potentially causing denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-7040?
CVE-2025-7040 is a high-severity missing authorization vulnerability in cloudinfrastructureservices Cloud SAML SSO – Single Sign On Login, published on 6 Sep 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Cloud SAML SSO plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'set_organization_settings' action of the csso_handle_actions() function in all versions up to, and including, 1.0.19. The handler reads client-supplied POST parameters for organization settings and passes them directly to update_option() without any check of the user’s capabilities or a CSRF nonce. This makes it possible for unauthenticated attackers to change critical configuration (including toggling signing and encryption), potentially breaking the SSO flow and causing a denial-of-service.
Weakness: CWE-862
Which versions are affected by CVE-2025-7040?
How do I fix CVE-2025-7040?
No fix has been published for CVE-2025-7040 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2025-7040 being exploited?
There is no known exploitation of CVE-2025-7040 in the wild and no public exploit code.
Sources
Also known as GHSA-rjj3-8xxq-vxr6.