SAML IDP – Login with WordPress Users via SAML SSO Security & Risk Analysis

The saml-identity-provider-by-wpintegrals plugin v2.1.3 exhibits a mixed security posture. While a significant majority of SQL queries utilize prepared statements and output escaping is robust, there are notable areas of concern. The presence of 9 AJAX handlers, with 6 lacking authentication checks, represents a considerable attack surface. Furthermore, taint analysis reveals 4 flows with unsanitized paths, all classified as high severity, indicating potential for sensitive data exposure or unauthorized actions if these flows can be triggered by an attacker. The plugin's history of zero known CVEs is a positive indicator, suggesting either good development practices or limited historical scrutiny. However, the identified taint issues and unprotected AJAX endpoints present real risks that outweigh the positive history.