Skip to content
OpenAdvisories

Vendor

cyberlord92

46 known vulnerabilities.

Products

Active Directory Integration / LDAP Integration 4 OAuth Single Sign On – SSO (OAuth Client) 4 Miniorange OTP Verification with Firebase 4 Page and Post Restriction 4 miniOrange OTP Login, Verification and SMS Notifications 3 SAML Single Sign On – SSO Login 3 miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) 3 Employee Directory – Staff Directory and Listing 2 Integrate Dynamics 365 CRM 2 Web Application Firewall – website security 2 PowerBI Embed Reports 2 Broken Link Checker | Finder 2 miniOrange OTP Verification and SMS Notification for WooCommerce 1 Login with YourMembership – YM SSO Login 1 SAML IDP (Identity Provider) – Login with Website Users 1 miniOrange 2FA – Two-Factor Authentication for WordPress (SMS, Email & Google Authenticator) 1 All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login 1 WP Login and Register using JWT 1 Password Policy Manager | Password Manager 1 User Sync 1 Malware Scanner 1 WordPress Single Sign-On (SSO) - Single Site Standard 1 WordPress Single Sign-On (SSO) - Single Site Premium 1 WordPress Single Sign-On (SSO) - Multisite Premium 1 WordPress Single Sign-On (SSO) - Single Site Enterprise 1 WordPress Single Sign-On (SSO) - Multisite Enterprise 1 WordPress Single Sign-On (SSO) - Single Site All-Inclusive 1 WordPress Single Sign-On (SSO) - Multisite All-Inclusive 1 Staff/Employee Business Directory for Active Directory 1 Web3 – Crypto wallet Login & NFT token gating 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.2
    CVE-2023-4506

    Active Directory Integration / LDAP Integration <= 4.1.10 - LDAP Passback

    The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Passback in versions up to, and including, 4.1.10. This is due to insufficient validation when changing the LDAP server. This makes it possible for authenticated at…

    cyberlord92 Active Directory Integration / LDAP Integration Web / CMS
  • Low 2.2
    CVE-2023-4505

    Staff / Employee Business Directory for Active Directory <= 1.2.3 - Authenticated (Admin+) LDAP Passback

    The Staff / Employee Business Directory for Active Directory plugin for WordPress is vulnerable to LDAP Passback in versions up to, and including, 1.2.3. This is due to insufficient validation when changing the LDAP server. This makes it possible for authenti…

    cyberlord92 Staff/Employee Business Directory for Active Directory Web / CMS
  • Low 3.1
    CVE-2023-2599

    Active Directory Integration / LDAP Integration <= 4.1.4 - Cross-Site Request Forgery to SQL Injection

    The Active Directory Integration plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to time-based SQL Injection via the orderby and order parameters in versions up to, and including, 4.1.4 due to missing nonce verification on the get_use…

    cyberlord92 Active Directory Integration / LDAP Integration Web / CMS