{ads}

›

Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access

Written By Tuesday, 25 August 2026 Add Comment



August 25, 2026 at 02:04PM

Bad actors are attempting to exploit two severe unauthenticated authentication bypasses in the Xecurify miniOrange SAML 2.0 Single Sign On plugin that make it possible for an attacker to sign in as any WordPress user, including administrators. The vulnerabilities, as disclosed by Patchstack, are listed below - CVE-2026-61979 (CVSS score: 8.1) - An unauthenticated privilege escalation

from The Hacker News https://ift.tt/ofLYq1W

0 Response to "Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access"

Post a Comment

Subscribe to: Post Comments (Atom)

Article Top Ads

Central Ads Article 1

Middle Ads Article 2

Article Bottom Ads