WORDPRESS PLUGIN UNDER ATTACK FOR AUTH BYPASS FLAWS

Hackers are exploiting critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress. The flaws allow attackers to forge SAML responses and gain administrator access.