A vulnerability marked as critical has been reported in Cloud SAML SSO Plugin up to 1.0.19 on WordPress. This issue affects the function
csso_handle_actions
. The manipulation leads to missing authorization.
This vulnerability is referenced as CVE-2025-7040. Remote exploitation of the attack is possible. No exploit is available.