Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access
Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access, Prompting Urgent Patch Warnings Security researchers say hackers are actively exploiting two critical authentication bypass flaws in the miniOrange SAML 2.0 Single Sign On plugin for WordPress, a combination that lets attackers forge login credentials and walk straight into a site with full administrator … Read more