vulnerability
Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access
High
Summary
Attackers are exploiting two unauthenticated vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress, allowing them to gain administrator access to vulnerable sites. The vulnerabilities stem from flaws in signature validation, and a proof-of-concept is available, leading to widespread scanning activity targeting sites using the plugin.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data