This threat involves two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress. Exploiting these vulnerabilities enables attackers to forge SAML authentication responses, effectively bypassing authentication controls and gaining administrator access to WordPress sites using the plugin. The vulnerabilities are critical due to the potential for full administrative compromise. However, no detailed technical or version information is provided, and no patch or remediation details are available from the input data.

Successful exploitation of these vulnerabilities allows attackers to bypass authentication mechanisms and gain administrator-level access to WordPress sites using the miniOrange SAML 2.0 Single Sign On plugin. This can lead to full site compromise, including data theft, site defacement, or further malicious activity. There is no evidence of active exploitation in the wild based on the provided information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, monitor vendor communications for updates. No specific mitigation steps are provided in the input data.