Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access

Bad actors are attempting to exploit two severe unauthenticated authentication bypasses in the Xecurify miniOrange SAML 2.0 Single Sign On plugin that make it possible for an attacker to sign in as any WordPress user, including administrators. The vulnerabilities, as disclosed by Patchstack, are listed below - CVE-2026-61979 (CVSS score: 8.1) - An unauthenticated privilege escalation

thehackernews.com ·2h ago

Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access

We haven't written up this one. The Hacker News has the full story — the link below goes straight to it.

Read the original at thehackernews.com →

Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access

More in Tech

The ultimate mobile podcasting rig: Save $40 on Shure’s MV88+ microphone

Setting Up a Playwright JavaScript BDD Automation Framework with Cucumber

Garmin event live: get the coverage from Garmin's 'Play Harder' YouTube broadcast, possible Fenix 9 announcements & more

One Dead Container Stopped nginx From Starting At All

All-time low deal: Grab the DJI Mini 3 4K camera drone for $100 off at Amazon

Android is getting its own weird dots to cure car sickness