SecurityBleepingComputerabout 1 hour ago
WordPress miniOrange plugin hit by auth bypass attacks
1 min read
Hackers are exploiting two critical authentication bypass flaws, CVE-2026-61979 and CVE-2026-15981, in the miniOrange SAML 2.0 Single Sign On plugin for WordPress to forge SAML responses and log in as administrators. Patchstack disclosed the vulnerabilities, which were fixed in July, but paid editions lacked alerts.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
