As cited
Copy frozen at (site build).
vulnerabilities
Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access
Attackers are exploiting two unauthenticated authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress. These flaws, including CVE-2026-61979, allow privilege escalation and could enable an attacker to log in as any user, including administrators. Patchstack disclosed the issues, which carry a high severity rating.
Why it matters: WordPress site operators using the miniOrange SAML plugin are exposed to potential admin account takeovers and should patch immediately.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access
Attackers are exploiting two unauthenticated authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress. These flaws, including CVE-2026-61979, allow privilege escalation and could enable an attacker to log in as any user, including administrators. Patchstack disclosed the issues, which carry a high severity rating.
Why it matters: WordPress site operators using the miniOrange SAML plugin are exposed to potential admin account takeovers and should patch immediately.
- Source published
- First seen by Cybersecurity Tracker