Two miniOrange SAML WordPress plugin auth bypasses were exploited while paid editions never appeared in any vulnerability database.
Source originale
securityaffairs.com
WordPress Websites Targeted via MiniOrange Plugin Vulnerabilities ↗
securityweek.com · 25 août
Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access ↗
thehackernews.com · 25 août
Hackers target WordPress sites in miniOrange auth bypass attacks ↗
bleepingcomputer.com · 24 août