WordPress plugin
Active Directory Integration / LDAP Integration security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 8 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High3
- Medium3
- Low2
All Active Directory Integration / LDAP Integration vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Unauthenticated Information Disclosure ≤4.1.9Update to 4.1.10 | CVE-2023-5003 | |
| Low2.2 | LDAP Passback ≤4.1.10Update to 4.2 | — | |
| High7.5 | Sensitive Information Exposure ≤4.1.9Update to 4.1.10 | CVE-2023-4506 | |
| High7.6 | Authenticated (Subscriber+) LDAP Injection ≤4.1.5Update to 4.1.6 | CVE-2023-3447 | |
| High7.2 | Authenticated (Administrator+) SQL Injection ≤4.1.4Update to 4.1.5 | CVE-2023-2484 | |
| Low3.1 | Cross-Site Request Forgery to SQL Injection ≤4.1.4Update to 4.1.5 | CVE-2023-2599 | |
| Medium5.3 | Unauthenticated Information Disclosure ≤4.1.0Update to 4.1.1 | CVE-2023-0812 | |
| Medium6.1 | Reflected Cross-Site Scripting <3.6.95Update to 3.6.95 | — |
- Medium5.3Unauthenticated Information Disclosure
≤4.1.9Update to 4.1.10
- Low2.2LDAP Passback
≤4.1.10Update to 4.2
- High7.5Sensitive Information Exposure
≤4.1.9Update to 4.1.10
- High7.6Authenticated (Subscriber+) LDAP Injection
≤4.1.5Update to 4.1.6
- High7.2Authenticated (Administrator+) SQL Injection
≤4.1.4Update to 4.1.5
- Low3.1Cross-Site Request Forgery to SQL Injection
≤4.1.4Update to 4.1.5
- Medium5.3Unauthenticated Information Disclosure
≤4.1.0Update to 4.1.1
- Medium6.1Reflected Cross-Site Scripting
<3.6.95Update to 3.6.95
Active Directory Integration / LDAP Integration: common questions
Does Active Directory Integration / LDAP Integration have known vulnerabilities?
Yes. VulnCrest Radar lists 8 known vulnerabilities in Active Directory Integration / LDAP Integration: 3 high, 3 medium, 2 low. None are known to affect version null.
How do I check which version of Active Directory Integration / LDAP Integration I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Active Directory Integration / LDAP Integration vulnerability?
CVE-2023-5003, published Sep 25, 2023: Active Directory Integration / LDAP Integration <= 4.1.9 - Unauthenticated Information Disclosure. Severity: Medium (CVSS 5.3).
Is any Active Directory Integration / LDAP Integration vulnerability listed in CISA KEV?
No. None of the known Active Directory Integration / LDAP Integration vulnerabilities is currently listed in the CISA KEV catalog.