Known vulnerabilities in Unknown Shibboleth
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-12281 | The Shibboleth WordPress plugin before 2.5.4 does not fail closed when its HTTP header identity mode is enabled… | 8.1 High | Jul 15, 2026 |