Hackers target WordPress sites in miniOrange auth bypass attacks
Teaser from the source
Hackers are attempting to exploit two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress that can be used to forge SAML responses and log in as administrators. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on miniOrange
Other advisories
- HighCVE-2026-62126miniOrange SAML SP Single Sign On: Ressourcenzuweisung ohne Begrenzung
- HighCVE-2026-62126miniOrange SAML SP Single Sign On: Ressourcenzuweisung ohne Begrenzung
- MediumCVE-2026-54852miniOrange Page Restriction WordPress (WP): fehlende Autorisierung
- MediumCVE-2026-54852miniOrange Page Restriction WordPress (WP): fehlende Autorisierung
- MediumCVE-2026-114696miniOrange Page Restriction WordPress (WP): fehlende Autorisierung
- MediumCVE-2026-114696miniOrange Page Restriction WordPress (WP): fehlende Autorisierung
- HighCVE-2026-111949miniOrange 2FA: unzureichende Authentifizierung
- HighCVE-2026-111949miniOrange 2FA: unzureichende Authentifizierung
ID