Active exploitation of critical authentication bypass vulnerabilities in miniOrange SAML plugin for WordPress

Threat actors are actively exploiting two critical vulnerabilities in the miniOrange SAML 2.0 SSO plugin, allowing unauthorized administrative access via forged SAML responses. The scope of successful compromises remains unquantified, posing a significant risk to organizations relying on the plugin for identity management.