Hackers target WordPress sites in miniOrange auth bypass attacks

BleepingComputer by Bill Toulas 24 August 2026, 22:26 EEST Security WordPress

Hackers are attempting to exploit two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress that can be used to forge SAML responses and log in as administrators.

Read the full story on BleepingComputer https://www.bleepingcomputer.com/news/security/hackers-target-wordpress-sites-in-miniorange-auth-bypass-attacks/

Most WordPress sites are compromised through something ordinary: an unpatched plugin, an abandoned theme, an account without two-factor. If you would rather updates and backups simply happened, CrockyHost hosting does them for you.

Keep reading

ReliaQuest confirms failed data-theft attack after ShinyHunters breach BleepingComputer
⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More The Hacker News
South Korean startup platform breach exposes key management failures BleepingComputer
WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords The Hacker News