Hackers target WordPress sites in miniOrange auth bypass attacks

Hackers are attempting to exploit two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress that can be used to forge SAML responses and log in as administrators [1].

Sources

1. bleepingcomputer.com · Hackers target WordPress sites in miniOrange auth bypass attacks Aug 24, 2026

This is the neutral brief the press writes once, for everyone, before each reader’s paper adds its own so-what. It links out; it does not republish. 1 article clustered.

Print your own paper