CVE-2026-61979

CVSS: 8.1 High
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Risk score: 64.8
Published: 2026-08-13
Status: Deferred

Unauthenticated Privilege Escalation in SAML SP Single Sign On <= 5.4.3 versions.

Weaknesses

CWE-266

Coverage 2

vulnerability

WordPress Websites Targeted via MiniOrange Plugin Vulnerabilities

Threat actors are actively exploiting two recently patched vulnerabilities within the MiniOrange SAML 2.0 Single Sign-On plugin for WordPress websites. These vulnerabilities allow attackers to bypass authentication and g…

SecurityWeek · 5d ago High

CVE-2026-61979 CVE-2026-15981 wordpress vulnerability authentication

vulnerability

Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access

Attackers are exploiting two unauthenticated vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress, allowing them to gain administrator access to vulnerable sites. The vulnerabilities stem from f…

The Hacker News · 5d ago High

CVE-2026-61979 CVE-2026-15981 wordpress saml authentication

All articles mentioning it

Advisories and references

patchstack.com/database/wordpress/plugin/miniorange-saml-20-single-s...