
RADIO 007 · September 2 · 3 min
WordPress Security Alert: MiniOrange SAML SSO Vulnerabilities Enable Admin Account Takeover
0:00-3:44
transcript
show notes
www.osintinvestigate.com
WordPress website owners are facing a new security threat involving the MiniOrange SAML 2.0 Single Sign-On plugin. Two critical authentication bypass vulnerabilities, CVE-2026-61979 and CVE-2026-15981, are being actively exploited in opportunistic attacks against websites running vulnerable versions of the plugin.
WordPress website owners are facing a new security threat involving the MiniOrange SAML 2.0 Single Sign-On plugin. Two critical authentication bypass vulnerabilities, CVE-2026-61979 and CVE-2026-15981, are being actively exploited in opportunistic attacks against websites running vulnerable versions of the plugin.
links1


