miniOrange

Search everything

Mentions · 7d0
Mentions · 30d0
All mentions5
First seenAug 21, 2026
Last mentionedSep 28, 2026

Timeline

5 articles · newest first

Top 10 Best Cloud Directory Services in 2026 [Ranked & Scored]

A 2026 ranking puts Microsoft Entra ID first among cloud directories, ahead of JumpCloud and Okta.

Cyber Security NewsSep 28, 06:34 UTC · Sep 28, 2026Industry2 · 1 read

[webapps] miniOrange 5.4.3 - Unauthenticated Auth Bypass

A proof-of-concept exploit for an unauthenticated authentication bypass in miniOrange 5.4.3 has been published on Exploit-DB.

Exploit-DBSep 1, 00:00 UTC · Sep 1, 2026Exploit / PoC1 · 1 read

Two CVSS 9.8 Auth Bypasses in miniOrange SAML WordPress Plugin Were Exploited Before Any Database Even Listed the Paid Editions as Vulnerable

Attackers actively exploit two CVSS 9.8 auth bypasses (CVE-2026-61979, CVE-2026-15981) in the miniOrange SAML WordPress plugin, forging SAML responses to become admin.

Security AffairsAug 25, 16:43 UTC · Aug 25, 2026Exploit / PoCExploitedCVE-2026-61979 CVE-2026-159814 · 2 reads

Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access

Attackers are exploiting two unauthenticated WordPress auth bypasses (CVE-2026-61979, CVE-2026-15981, max CVSS 9.8) in miniOrange SAML SSO to gain admin sessions.

The Hacker NewsAug 25, 08:34 UTC · Aug 25, 2026Exploit / PoCExploitedCVE-2026-61979 CVE-2026-159811 · 1 read

One slug, seven editions: the miniOrange SAML SSO bug that let anyone log in as your WordPress admin

DigitalOcean researchers reported a critical authentication flaw in miniOrange SAML SSO WordPress plugins, allowing login as WordPress admin across seven editions.

PatchstackAug 21, 16:58 UTC · Aug 21, 2026Vulnerability1

Related CVEs

by mentions

CVE-2026-15981<1%9.8
The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.4
published Jul 23, 2026WordPress
CVE-2026-61979<1%8.1
Unauthenticated privilege escalation in miniOrange SAML SSO WordPress plugin
published Aug 13, 2026miniOrange SAML SP Single Sign On (WordPress plugin)

Appears with

Patchstackorganization · 2
WordPressproduct · 2
Patchstackvendor · 2
DigitalOceanvendor · 2
miniOrange SAML 2.0 Single Sign Onproduct · 2
Ping Identityvendor · 1
JumpCloudproduct · 1
DigitalOceanorganization · 1
miniOrange SAML SSO WordPress pluginproduct · 1
Amazon Web Servicesvendor · 1
Microsoftvendor · 1
Xecurifyvendor · 1
OneLoginvendor · 1
JumpCloudvendor · 1
DigitalOceanvictim · 1
Google Cloud Identityproduct · 1

Entities are extracted by the model from each article. First seen Aug 21, 2026, last mentioned Sep 28, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.