Attackers Exploit miniOrange SAML Flaws to Gain WordPress Admin Access
Threat actors are actively exploiting two critical authentication bypass vulnerabilities in the Xecurify miniOrange SAML 2.0 Single Sign On plugin for WordPress.…
Tag: DigitalOcean
BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins
Cybersecurity researchers have uncovered a supply chain attack targeting WordPress plugin vendor BdThemes, leading to the temporary suspension of several plugins from…
DigitalOcean: Cloud Infrastructure Provider
DigitalOcean is a cloud infrastructure provider whose security team discovered the miniOrange SAML vulnerabilities after observing anomalous admin session attempts. They reported…