Vulnerabilities

WordPress miniOrange SAML plugin auth bypass exploited

August 24, 2026 1 min read 5 views
cybersecurity malware news
Attackers are exploiting two critical auth bypass flaws (CVE-2026-61979, CVE-2026-15981) in the miniOrange SAML SSO plugin to forge SAML responses and gain admin access. Patches exist but paid editions lack update warnings.

Was this article helpful?

0 found this helpful

Related Articles

Jev and other decision models can still be tricked with prompt injection

3 min read

EU Grocers Pay a Steep Price for Unpatched Fridge Firmware

1 min read

Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution

1 min read

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.

Schedule a Demo