CVE-2023-5003: Undefined Security Weakness

The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.10 stores sensitive LDAP logs in a buffer file when an administrator wants to export said logs. Unfortunately, this log file is never removed, and remains accessible to any users knowing the URL to do so...

CVE-2023-4506: Missing Authentication for Critical Function

The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Passback in versions up to, and including, 4.1.10. This is due to insufficient validation when changing the LDAP server. This makes it possible for authenticated attackers, with administrative access an...

PT-2023-29379

Name of the Vulnerable Software and Affected Versions Active Directory Integration / LDAP Integration plugin for WordPress versions up to, and including, 4.1.10 Description The issue is due to insufficient validation when changing the LDAP server, making it possible for authenticated attackers wi...

PT-2023-29369

Name of the Vulnerable Software and Affected Versions The Staff / Employee Business Directory for Active Directory plugin for WordPress versions up to, and including, 1.2.3 The Active Directory Integration / LDAP Integration plugin for WordPress versions up to, and including, 4.1.10 Description T...

CVE-2023-3447: Improper Neutralization of Special Elements used in an LDAP Query

The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Injection in versions up to, and including, 4.1.5. This is due to insufficient escaping on the supplied username value. This makes it possible for attackers, with an existing account on a vulnerable...

CVE-2023-0812: Undefined Security Weakness

The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.1 does not have proper authorization or nonce values for some POST requests, leading to unauthenticated data disclosure...