NewsThe Hacker NewsSMEPublic sector

    Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access

    Share
    Bad actors are attempting to exploit two severe unauthenticated authentication bypasses in the Xecurify miniOrange SAML 2.0 Single Sign On plugin that make it possible for an attacker to sign in as any WordPress user, including administrators. The vulnerabilities, as disclosed by Patchstack, are listed below - CVE-2026-61979 (CVSS score: 8.1) - An unauthenticated privilege escalation

    Linked advisories

    Affected vendors and products

    More on miniOrange

    Other advisories

    Other news entries

    Source: https://thehackernews.com/2026/08/attackers-target-miniorange-saml-flaws.html

    ID