Tag: CVE-2026-61979

CSBadmin

SAML plugin bugs hand WordPress admin access to strangers

Two unauthenticated bugs in the miniOrange SAML plugin let attackers log in as any WordPress user.