WordPress plugin
Staff/Employee Business Directory for Active Directory security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium1
- Low1
All Staff/Employee Business Directory for Active Directory vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Low2.2 | Authenticated (Admin+) LDAP Passback ≤1.2.3Update to 1.3 | CVE-2023-4505 | |
| Medium5.4 | Insufficient Escaping of Stored LDAP Values ≤1.2.2Update to 1.2.3 | CVE-2023-4757 |
- Low2.2Authenticated (Admin+) LDAP Passback
≤1.2.3Update to 1.3
- Medium5.4Insufficient Escaping of Stored LDAP Values
≤1.2.2Update to 1.2.3
Staff/Employee Business Directory for Active Directory: common questions
Does Staff/Employee Business Directory for Active Directory have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Staff/Employee Business Directory for Active Directory: 1 medium, 1 low. None are known to affect version null.
How do I check which version of Staff/Employee Business Directory for Active Directory I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Staff/Employee Business Directory for Active Directory vulnerability?
CVE-2023-4505, published Sep 25, 2023: Staff / Employee Business Directory for Active Directory <= 1.2.3 - Authenticated (Admin+) LDAP Passback. Severity: Low (CVSS 2.2).
Is any Staff/Employee Business Directory for Active Directory vulnerability listed in CISA KEV?
No. None of the known Staff/Employee Business Directory for Active Directory vulnerabilities is currently listed in the CISA KEV catalog.