Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Critical WordPress SAML SSO Flaws Enable Unauthenticated Admin Account Takeover
Excerpt
Two critical vulnerabilities in the miniOrange SAML 2.0 Single Sign-On WordPress plugin could allow unauthenticated attackers to forge SAML assertions and access /wp-admin as any existing account, including administrators. The flaws, tracked as CVE-2026-61979 and CVE-2026-15981, carry a CVSS score of 9.8 and have reportedly been targeted by opportunistic scanning activity. DigitalOcean’s security team detected and blocked an anomalous WordPress administrator session attempt…
Read the original report →Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-61979 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-15981 | Medium | Score 51/100 | First seen |
IOC Relationship Graph
Building graph…