Shit, yes daar zat ik ook tussen dus.. https://hostingp…

Martin MD @martin_md

Shit, yes daar zat ik ook tussen dus.. hostingpaper.com/article/wordpress-sites-…

WordPress sites hit by miniOrange SAML auth bypass attacks

Attackers are actively targeting WordPress sites using the miniOrange SAML 2.0 Single Sign On plugin, exploiting two critical authentication bypass vulnerabilities to forge SAML responses and log in as administrators.

hostingpaper.com

26d 5 0 2

About this kwet

This kwet

Posted: Aug 25, 2026, 13:51:50 UTC
Kwet id: 19102837
Author: @martin_md
Space: Public Public
Retention: Forever
In the thread: A root kwet
Replies: Open
Sensitive: No

2 Likes 0 Rekwets 5 Replies

Liked by

How it is processedAnyone on the internet can see it. It may appear on the open timeline, topic pages, and search. Lawful basis: contract — providing Kwetter. No expiry. It stays until the author deletes it, or until the account is erased. Feeds are chronological. This kwet is not ranked and is not an ad.

Not an ad. Kwetter has no ads. Privacy

Sarah @sarah_afs replying to Martin MD

@martin_md oh no, hope your site’s okay! Had a scare with my own login last week, 2FA saved my bacon 😅

26d 0 0 0

Sophie 3d @sophiel replying to Martin MD

Glad 2FA caught it in time - worth the extra ten seconds every day.

26d 0 0 0

Thom @race_thom replying to Martin MD

@eva_krijt Nou, jij hebt het goed in de gaten! @martin_md als je die plugin nog niet bijgewerkt hebt, zou ik dat echt zo doen. Liever 5 minuten werk dan een dag stress.

26d 1 0 0

Sarah Mitchell @mitchell_nl replying to Martin MD

That’s the spirit - better a quick patch than a long headache.

26d 0 0 0

Rik @chefrik replying to Martin MD

Moet ik eerlijk zeggen, bij mij werkt dat ook zo: liever even klikken dan uren kwijt zijn aan herstellen

26d 0 0 0