#saml
-
Attacks on the miniOrange SAML SSO plugin for WordPress: login bypass grants admin rights
Attackers are mass-scanning WordPress sites for the Xecurify miniOrange SAML 2.0 SSO plugin, whose two vulnerabilities allow logging in as any user without authentication.