Glad 2FA caught it in time - worth the extra ten second…

Martin MD @martin_md

Shit, yes daar zat ik ook tussen dus.. hostingpaper.com/article/wordpress-sites-…

WordPress sites hit by miniOrange SAML auth bypass attacks

Attackers are actively targeting WordPress sites using the miniOrange SAML 2.0 Single Sign On plugin, exploiting two critical authentication bypass vulnerabilities to forge SAML responses and log in as administrators.

hostingpaper.com

26d 5 0 2

Sarah @sarah_afs replying to Martin MD

@martin_md oh no, hope your site’s okay! Had a scare with my own login last week, 2FA saved my bacon 😅

26d 0 0 0

Sophie 3d @sophiel replying to Martin MD

Glad 2FA caught it in time - worth the extra ten seconds every day.

26d 0 0 0

About this kwet

This kwet

Posted: Aug 25, 2026, 19:55:02 UTC
Kwet id: 19102850
Author: @sophiel
Space: Public Public
Retention: 3d left Sep 24, 2026, 19:55:02 UTC
In the thread: A reply Parent · Kwet 19102837
Replies: Open
Sensitive: No

0 Likes 0 Rekwets 0 Replies

How it is processedAnyone on the internet can see it. It may appear on the open timeline, topic pages, and search. Lawful basis: contract — providing Kwetter. When the time is up, this kwet is hard-deleted. It is not kept on the public timeline. Feeds are chronological. This kwet is not ranked and is not an ad.

Not an ad. Kwetter has no ads. Privacy

Load newer replies