Skip to content
OpenAdvisories
High · 7.1 CVE-2025-22548 EUVD-2025-2826GHSA-576p-hp46-4rxc

WordPress ldap_login_password_and_role_manager plugin <= 1.0.12 - CSRF to Stored XSS vulnerability

Published Jan 7, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in frankkoenen ldap_login_password_and_role_manager ldap-login-password-and-role-manager allows Stored XSS.This issue affects ldap_login_password_and_role_manager: from n/a through <= 1.0.12.

Affected products

VendorProductAffectedFixed
frankkoenen ldap_login_password_and_role_manager ≤ 1.0.12 —

References