Skip to content
OpenAdvisories

Vendor

cyberlord92

46 known vulnerabilities.

Products

Active Directory Integration / LDAP Integration 4 OAuth Single Sign On – SSO (OAuth Client) 4 Miniorange OTP Verification with Firebase 4 Page and Post Restriction 4 miniOrange OTP Login, Verification and SMS Notifications 3 SAML Single Sign On – SSO Login 3 miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) 3 Employee Directory – Staff Directory and Listing 2 Integrate Dynamics 365 CRM 2 Web Application Firewall – website security 2 PowerBI Embed Reports 2 Broken Link Checker | Finder 2 miniOrange OTP Verification and SMS Notification for WooCommerce 1 Login with YourMembership – YM SSO Login 1 SAML IDP (Identity Provider) – Login with Website Users 1 miniOrange 2FA – Two-Factor Authentication for WordPress (SMS, Email & Google Authenticator) 1 All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login 1 WP Login and Register using JWT 1 Password Policy Manager | Password Manager 1 User Sync 1 Malware Scanner 1 WordPress Single Sign-On (SSO) - Single Site Standard 1 WordPress Single Sign-On (SSO) - Single Site Premium 1 WordPress Single Sign-On (SSO) - Multisite Premium 1 WordPress Single Sign-On (SSO) - Single Site Enterprise 1 WordPress Single Sign-On (SSO) - Multisite Enterprise 1 WordPress Single Sign-On (SSO) - Single Site All-Inclusive 1 WordPress Single Sign-On (SSO) - Multisite All-Inclusive 1 Staff/Employee Business Directory for Active Directory 1 Web3 – Crypto wallet Login & NFT token gating 1
All Critical High Medium Low Exploited only Public exploit

46 results · Feed

  • Low 2.2
    CVE-2023-4505

    Staff / Employee Business Directory for Active Directory <= 1.2.3 - Authenticated (Admin+) LDAP Passback

    The Staff / Employee Business Directory for Active Directory plugin for WordPress is vulnerable to LDAP Passback in versions up to, and including, 1.2.3. This is due to insufficient validation when changing the LDAP server. This makes it possible for authenti…

    cyberlord92 Staff/Employee Business Directory for Active Directory Web / CMS
  • Critical 9.8
    CVE-2023-3249

    Web3 – Crypto wallet Login & NFT token gating <= 2.6.0 - Authentication Bypass

    The Web3 – Crypto wallet Login & NFT token gating plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.6.0. This is due to incorrect authentication checking in the 'hidden_form_data' function. This makes it possible …

    cyberlord92 Web3 – Crypto wallet Login & NFT token gating Web / CMS
  • High 7.6
    CVE-2023-3447

    Active Directory Integration / LDAP Integration <= 4.1.5 - Authenticated (Subscriber+) LDAP Injection

    The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Injection in versions up to, and including, 4.1.5. This is due to insufficient escaping on the supplied username value. This makes it possible for attackers, with a…

    cyberlord92 Active Directory Integration / LDAP Integration Web / CMS
  • Critical 9.8
    CVE-2023-2982 Public exploit Scanner template EPSS 46%

    WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass

    The WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 7.6.4. This is due to insufficient encryption on the user being supplied during a login …

    cyberlord92 miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Web / CMS
  • Low 3.1
    CVE-2023-2599

    Active Directory Integration / LDAP Integration <= 4.1.4 - Cross-Site Request Forgery to SQL Injection

    The Active Directory Integration plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to time-based SQL Injection via the orderby and order parameters in versions up to, and including, 4.1.4 due to missing nonce verification on the get_use…

    cyberlord92 Active Directory Integration / LDAP Integration Web / CMS
  • High 7.2
    CVE-2023-2484

    Active Directory Integration / LDAP Integration <= 4.1.4 - Authenticated (Administrator+) SQL Injection

    The Active Directory Integration plugin for WordPress is vulnerable to time-based SQL Injection via the orderby and order parameters in versions up to, and including, 4.1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient pre…

    cyberlord92 Active Directory Integration / LDAP Integration Web / CMS