Hackers target WordPress sites in miniOrange auth bypass attacks
Teaser from the source
Hackers are attempting to exploit two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress that can be used to forge SAML responses and log in as administrators. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on miniOrange
Other advisories
- CriticalCVE-2026-120844miniOrange OAuth Single Sign On: fehlerhafte Rechtevergabe
- CriticalCVE-2026-120844miniOrange OAuth Single Sign On: fehlerhafte Rechtevergabe
- HighCVE-2026-62126miniOrange SAML SP Single Sign On: Ressourcenzuweisung ohne Begrenzung
- HighCVE-2026-62126miniOrange SAML SP Single Sign On: Ressourcenzuweisung ohne Begrenzung
- MediumCVE-2026-54852miniOrange Page Restriction WordPress (WP): fehlende Autorisierung
- MediumCVE-2026-54852miniOrange Page Restriction WordPress (WP): fehlende Autorisierung
- MediumCVE-2026-114696miniOrange Page Restriction WordPress (WP): fehlende Autorisierung
- MediumCVE-2026-114696miniOrange Page Restriction WordPress (WP): fehlende Autorisierung
ID