Skip to content
Artwork for RADIO 007
RADIO 007 · September 2 · 3 min

WordPress Security Alert: MiniOrange SAML SSO Vulnerabilities Enable Admin Account Takeover

www.osintinvestigate.com WordPress website owners are facing a new security threat involving the MiniOrange SAML 2.0 Single Sign-On plugin. Two critical authentication bypass vulnerabilities, CVE-2026-61979 and CVE-2026-15981, are being actively exploited in opportunistic attacks against websites running vulnerable versions of the plugin.

0:00-3:44

transcript

No transcript — this publisher did not publish one.

show notes

www.osintinvestigate.com

WordPress website owners are facing a new security threat involving the MiniOrange SAML 2.0 Single Sign-On plugin. Two critical authentication bypass vulnerabilities, CVE-2026-61979 and CVE-2026-15981, are being actively exploited in opportunistic attacks against websites running vulnerable versions of the plugin.
links1