As cited
Copy frozen at (site build).
vulnerabilities
WordPress Websites Targeted via MiniOrange Plugin Vulnerabilities
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
WordPress Websites Targeted via MiniOrange Plugin Vulnerabilities
Two authentication bypass vulnerabilities, CVE-2026-61979 and CVE-2026-15981, affect the MiniOrange SAML 2.0 SSO plugin for WordPress. These flaws enable attackers to circumvent login controls on affected websites.
Why it matters: WordPress site owners using the MiniOrange SAML 2.0 SSO plugin face immediate risk of unauthorized access; patching or disabling the plugin should be prioritized.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
WordPress Websites Targeted via MiniOrange Plugin Vulnerabilities
Two authentication bypass vulnerabilities, CVE-2026-61979 and CVE-2026-15981, affect the MiniOrange SAML 2.0 SSO plugin for WordPress. These flaws enable attackers to circumvent login controls on affected websites.
Why it matters: WordPress site owners using the MiniOrange SAML 2.0 SSO plugin face immediate risk of unauthorized access; patching or disabling the plugin should be prioritized.
- Source published
- First seen by Cybersecurity Tracker