Skip to content
OpenAdvisories

Product · cyberlord92

Active Directory Integration / LDAP Integration

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.2
    CVE-2023-4506

    Active Directory Integration / LDAP Integration <= 4.1.10 - LDAP Passback

    The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Passback in versions up to, and including, 4.1.10. This is due to insufficient validation when changing the LDAP server. This makes it possible for authenticated at…

    cyberlord92 Active Directory Integration / LDAP Integration Web / CMS
  • Low 3.1
    CVE-2023-2599

    Active Directory Integration / LDAP Integration <= 4.1.4 - Cross-Site Request Forgery to SQL Injection

    The Active Directory Integration plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to time-based SQL Injection via the orderby and order parameters in versions up to, and including, 4.1.4 due to missing nonce verification on the get_use…

    cyberlord92 Active Directory Integration / LDAP Integration Web / CMS