Martin MD

Attackers are actively targeting WordPress sites using the miniOrange SAML 2.0 Single Sign On plugin, exploiting two critical authentication bypass vulnerabilities to forge SAML responses and log in as administrators.