{"uuid": "e81635e2-72a9-4b7a-bbf2-13fc56cbca4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15981", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrk4rv32bq2i", "content": "\ud83d\udd34 EXPLOITED\n\nA public exploit is out for a critical flaw in miniOrange's SAML single sign-on plugin for WordPress (CVSS 9.8).\n\nIt lets anyone log in as an admin, no password needed.\n\nAffects 10,000+ sites on 5.4.4 or older. Fix: update to 5.4.5. (CVE-2026-15981)", "creation_timestamp": "2026-07-26T10:01:16.638613Z"}