Vulnerabilities

Attackers Exploit miniOrange SAML Flaws for WordPress Admin

August 25, 2026 1 min read 5 views
cybersecurity threats news
Threat actors are exploiting two unauthenticated authentication bypasses in the miniOrange SAML 2.0 plugin, allowing attackers to log in as any WordPress user, including admins.

Was this article helpful?

0 found this helpful

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.