WordPress Security Alert: MiniOrange SAML SSO Vulnerabilities Enable Admin Account Takeover

www.osintinvestigate.com

WordPress website owners are facing a new security threat involving the MiniOrange SAML 2.0 Single Sign-On plugin. Two critical authentication bypass vulnerabilities, CVE-2026-61979 and CVE-2026-15981, are being actively exploited in opportunistic attacks against websites running vulnerable versions of the plugin.