CVE-2023-41873 – SAML SP Single Sign On <= 5.0.4 - Missing Authorization to notice dismissal

https://notcve.org/view.php?id=CVE-2023-41873

The SAML SP Single Sign On plugin for WordPress is vulnerable to unauthorized notice dismissal due to a missing capability check on the close_welcome_modal function in versions up to, and including, 5.0.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to dismiss the welcome tour of the plugin. • CWE-862: Missing Authorization •