Frequency
3
occurrences
First Seen
August 24, 2026
Last Seen
August 25, 2026
Related Threat Clusters
-
Critical miniOrange SAML SSO Vulnerabilities Allow WordPress Admin Takeover
Two critical authentication bypass vulnerabilities (CVE-2026-61979 and CVE-2026-15981) have been identified in the miniOrange SAML 2.0 Single Sign-On plugin for WordPress, allowing unauthenticated attackers to forge…
8 articles · Updated August 24, 2026
Recent Intelligence Reports
- Two CVSS 9.8 Auth Bypasses in miniOrange SAML WordPress Plugin Were Exploited Before Any Database Even Listed the Paid Editions as Vulnerable — Securityaffairs.Co · August 25, 2026
- Attackers Exploit WordPress SSO Plugin; Six Paid Editions Were Never in Any Vulnerability ... — Techtimes · August 25, 2026
- One Slug Seven Editions The Miniorange Saml Sso Bug That Let Anyone Log In As Your Wordpress Admin — patchstack.com · August 24, 2026