CRITICALVulnerability
Global

Hackers target WordPress sites in miniOrange auth bypass attacks

·Source: BleepingComputer

Updated:

Executive Summary

Hackers are attempting to exploit two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress that can be used to forge SAML responses and log in as administrators. [...]

Analysis

Hackers are attempting to exploit two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress that can be used to forge SAML responses and log in as administrators. [...]
Source Attribution

Originally published by BleepingComputer on Aug 24, 2026.

Related Threats

MEDIUMVulnerability

Visa joins MAS-led project to pilot stablecoin settlement

Visa has joined a Monetary Authority of Singapore (MAS)-led project focused on connecting traditional payments and stablecoin networks.

Finextra
MEDIUMVulnerability

UK Government Reticent Over Power Plant Hack

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/uk-government-reticent-over-power-plant-hack-image_small-7-a-32655.jpg" align=right hspace=4><b>Government Tight Lipped Over Possible Iranian Hack, Experts Complain</b><br>Operational technology security leaders are calling on the British government to release technical details of a cyberattack last month that took a small power p

Bank Info Security
CRITICALVulnerability

NVD CRITICAL: CVE-2026-80138 — ClipBucket V5's web installer fails to properly validate or escape the php_cli_f...

ClipBucket V5's web installer fails to properly validate or escape the php_cli_filepath parameter before passing it to shell execution. Unauthenticated attackers can submit a crafted POST request to the installer with a malicious php_cli_filepath value to execute arbitrary commands as the web server user.

CVE-2026-80138
NIST NVD