Attackers Exploit miniOrange SAML Flaws for WordPress Admin
August 25, 2026
1 min read
5 views
cybersecurity
threats
news
Threat actors are exploiting two unauthenticated authentication bypasses in the miniOrange SAML 2.0 plugin, allowing attackers to log in as any WordPress user, including admins.
Was this article helpful?
0 found this helpful