A critical Local File Inclusion vulnerability in the Cloud SAML SSO plugin for WordPress exposes systems to unauthorized file access and potential code execution.

The plugin fails to properly sanitize filenames used in include or require statements, resulting in a Local File Inclusion (LFI) vulnerability. This flaw allows an unauthenticated attacker to manipulate file paths to access sensitive system files or execute arbitrary PHP code.

The exploitation of this vulnerability poses a severe risk to organizational data and system integrity. By leveraging LFI, an attacker may read configuration files, access sensitive credentials, or gain remote code execution capabilities, which could lead to a full compromise of the affected WordPress environment. With a CVSS score of 7.5, this high-severity flaw necessitates immediate attention to prevent unauthorized access and potential service disruption.

Immediate Action: Currently, there is no confirmed patch available; administrators should deactivate and remove the Cloud SAML SSO - Single Sign On Login plugin until a secure update is released by the vendor.

Proactive Monitoring: Review web server access logs for suspicious requests containing directory traversal patterns or unexpected file inclusions, particularly targeting the plugin directories.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block directory traversal attempts and unauthorized file inclusion requests to the web server.

Public Exploit Available: Unknown.

Given the potential for complete system compromise, organizations should prioritize the immediate removal of the affected plugin. If the functionality is essential, ensure that rigorous compensating controls are in place and monitor the vendor's security advisories closely for the release of a patched version that resolves this LFI vulnerability.