miniOrange WordPress Authentication Attacks
The story surfaced on 24 Aug, when BleepingComputer reported that hackers were targeting WordPress sites in miniOrange authentication-bypass attacks. On 25 Aug, The Hacker News described the route more specifically: attackers were exploiting miniOrange SAML flaws that can grant WordPress administrator access.
The reports follow broader WordPress security coverage from the two outlets. This includes unauthenticated remote code execution through a CVSS 10.0 Bricksforge flaw; five critical plugin and theme flaws enabling site takeover or remote code execution; authentication bypass in the Burst Statistics plugin; pre-authentication cross-site scripting that could lead to PHP code execution; and a Comment2Shell flaw that can turn an anonymous comment into remote code execution through an administrator session.
For now, the miniOrange reports establish an attack path from a SAML flaw to administrator access.
Taking the reports as factual, impact is 0%. WordPress operators using the affected miniOrange authentication software face the direct risk that attackers can bypass authentication and obtain administrator access. The tracked event does not register broader impact beyond those exposed sites.
Watch for technical details identifying the affected miniOrange products and scope, as well as evidence of how widely attackers have used the flaws. Updates from BleepingComputer, The Hacker News, or miniOrange could change the picture.
A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability
Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to
Hackers are leveraging a critical authentication bypass vulnerability in the WordPress plugin Burst Statistics to obtain admin-level access to websites. [...]
WordPress has fixed a pre-authentication reflected cross-site scripting (XSS) flaw in its login screen that affects every version of the content management system. pwn.ai
A new flaw in WordPress core let an anonymous visitor leave a comment that planted a hidden script on the page. If a logged-in administrator later opened that page, the script
NewsHive monitors these sources continuously. All signal titles above link to the original reporting.
Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →