TECH NEWS

WordPress Websites Targeted via MiniOrange Plugin Vulnerabilities

Threat actors have been attempting to hack WordPress websites by exploiting two recently patched vulnerabilities affecting a MiniOrange plugin.

The two vulnerabilities are CVE-2026-61979 and CVE-2026-15981, and they affect the MiniOrange SAML 2.0 Single Sign-On (SSO) plugin, which enables SSO for WordPress websites.

The free edition of the plugin is installed on more than 10,000 WordPress sites, but there are also several paid and enterprise versions for which usage statistics are not available.

According to an analysis conducted by DigitalOcean and security firm Patchstack, the vulnerabilities are critical authentication bypasses that can be exploited to log in as any WordPress user, including administrators.

Threat actors have been attempting to exploit CVE-2026-61979 and CVE-2026-15981 in what Patchstack described as opportunistic attacks rather than a targeted campaign.

The problem is that while all affected versions of the MiniOrange SAML 2.0 SSO plugin have been patched, the developer has not warned users about...

Copyright of this story solely belongs to securityweek.com. To see the full text click HERE

https://platform.theverge.com/wp-content/uploads/sites/2/2026/08/polishing-cloth.png?quality=90&strip=all&crop=0,16.342557965595,100,67.314884068811

Apple’s ‘new’ polishing cloth is the same except $10 cheaper

Emma Roth is a news writer who covers the streaming wars, consumer tech, crypto, social media, and much more. Previously, she was a writer and editor at MUO. Apple just dropped a new polishing cloth, and unlike its refreshed Mac Mini models, it comes with a price cut, as spotted

https://cdn.mos.cms.futurecdn.net/ucFZ7tKSFWyGKUEuuJ74ig-1376-80.jpg

How to self-host your own AI agent

When you run AI agents like ChatGPT Work or Microsoft Copilot, your files and prompts all pass through third-party servers that you’re not in control of. Essentially, you’re paying a subscription fee for the privilege of letting someone else handle your data, when you could be running the

https://cdn.mos.cms.futurecdn.net/QG2izsbjsxyxkSop6B3Pp6-2560-80.jpg

'A dream come true': Sihoo Doro C300 Pro V2 ergonomic office chair offers adaptive lumbar support, 8D armrests and a 135-degree recline, and it's a price cut in the Labor Day and back-to-school sale

When you spend much of the day at a desk, investing in an ergonomic office chair can be money well spent. And one of our favorites is the Doro C300 Pro V2, currently $400 (was $500) at Sihoo in the Labor Day sale when you combine codes BTS20 and WELCOME10.

https://cdn.mos.cms.futurecdn.net/vUGGQXBvMLxK65oJegUwgk-2000-80.jpg

The AI industry is about to relearn every lesson of the ad blocking wars

Maybe money does not explain everything, but it explains a lot. Goldman Sachs estimates the AI build-out will require roughly $7.6 trillion in capital over the next five years across compute, data centers and power. It’s unlikely that subscriptions alone will cover the bill, which is why ads

Read more

Apple’s ‘new’ polishing cloth is the same except $10 cheaper

How to self-host your own AI agent

'A dream come true': Sihoo Doro C300 Pro V2 ergonomic office chair offers adaptive lumbar support, 8D armrests and a 135-degree recline, and it's a price cut in the Labor Day and back-to-school sale

The AI industry is about to relearn every lesson of the ad blocking wars