The Cloud SAML SSO WordPress plugin suffers from a missing authorization control on the 'set_organization_settings' action in the csso_handle_actions() function. The handler processes client-supplied POST parameters and directly updates configuration options via update_option() without verifying user capabilities or requiring a CSRF nonce. This lack of access control enables unauthenticated attackers to alter sensitive organization settings, including security-critical toggles for signing and encryption, which can break the SSO flow and result in denial-of-service.

An attacker can modify critical configuration settings without authentication, potentially disabling or corrupting the SSO login process. This can cause denial-of-service for legitimate users relying on SSO authentication. Although confidentiality is not impacted, the integrity of configuration data is compromised, and availability of the SSO service may be disrupted.

No official patch or fix is currently available for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, restrict access to the plugin's endpoints where possible and monitor for suspicious POST requests targeting organization settings. Applying strict web application firewall (WAF) rules to block unauthorized POST requests to the affected action may help mitigate risk temporarily.