Plugin: onelogin-saml-sso

Statistics

2024-06-17 → 2026-09-10 · 806 days

Downloads today

182

7-day total 572

Week over week

▼ -23%

vs prior 7 days

30-day trend

flat

▼ -31% MoM

Abandonment

○○○○○

healthy

Active versions

3.63.4

3.6 · 68.6%3.4 · 27.1%other · 4.3%

Ratings

5★

12

4★

0

3★

0

2★

0

1★

2

Support: 0/1 resolved

Alerts (0)

No open alerts.

Show 1 resolved alert

Medium code_scan_delta Resolved · fp_base64_saml_encoding 2026-07-02 03:54:23 (2mo ago)

Slug onelogin-saml-sso

Previous version 3.4.0

Current version 3.6.0

New findings

Pattern	Kind	File	Line	Snippet	Confidence
`base64_decode`	`builtin`	`php/lib/Saml2/Auth.php`	142	$inResponseTo = OneLogin_Saml2_LogoutRequest::getID(gzinflate(base64_decode($_GET['SAMLRequest'])));	`medium`
`gzinflate`	`builtin`	`php/lib/Saml2/Auth.php`	142	$inResponseTo = OneLogin_Saml2_LogoutRequest::getID(gzinflate(base64_decode($_GET['SAMLRequest'])));	`medium`
`base64_decode`	`builtin`	`php/lib/Saml2/LogoutResponse.php`	174	if (!$objKey->verifySignature($signedQuery, base64_decode($_GET['Signature']))) {	`medium`
`base64_decode`	`builtin`	`php/lib/Saml2/LogoutRequest.php`	330	if (!$objKey->verifySignature($signedQuery, base64_decode($_GET['Signature']))) {	`medium`

New finding count 4

View raw JSON

{
    "slug": "onelogin-saml-sso",
    "previous_version": "3.4.0",
    "current_version": "3.6.0",
    "new_findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "php/lib/Saml2/Auth.php",
            "line": 142,
            "snippet": "$inResponseTo = OneLogin_Saml2_LogoutRequest::getID(gzinflate(base64_decode($_GET['SAMLRequest'])));",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "php/lib/Saml2/Auth.php",
            "line": 142,
            "snippet": "$inResponseTo = OneLogin_Saml2_LogoutRequest::getID(gzinflate(base64_decode($_GET['SAMLRequest'])));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "php/lib/Saml2/LogoutResponse.php",
            "line": 174,
            "snippet": "if (!$objKey->verifySignature($signedQuery, base64_decode($_GET['Signature']))) {",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "php/lib/Saml2/LogoutRequest.php",
            "line": 330,
            "snippet": "if (!$objKey->verifySignature($signedQuery, base64_decode($_GET['Signature']))) {",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 4
}

SVN committers (3)

Accounts with actual commit access to onelogin-saml-sso on plugins.svn.wordpress.org, reconstructed from svn log. This is the list that matters for ownership changes — not the readme contributors.

Committer	Member since	Commits	First commit	Latest commit
onelogin	2010-05-08	54	2011-01-10 · r331008	2021-01-13 · r2455811
sixtomartin	2013-04-14	2	2022-02-04 · r2673178	2025-12-09 · r3415854
plugin-master	2007-03-09	1	2011-01-10 · r330701	2011-01-10 · r330701

Readme contributors (2)

Names the plugin's readme declares as contributors. A soft signal — anyone can be listed. The SVN access column is the ground-truth cross-reference: does this contributor actually commit code?

Contributor	Member since	SVN access	Status
onelogin	2010-05-08	54 commits	Active
sixtomartin	2013-04-14	2 commits	Active

Versions (3 most recent)

Version	Released	Download
2.1.5	2014-10-14 · 11y ago	zip
2.0.2b	2014-10-14 · 11y ago	zip
1.0.1	2014-08-13 · 12y ago	zip

OneLogin SAML SSO