Read the docs

Ldap Wp Login / Active Directory Integration Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Ldap Wp Login / Active Directory Integration Project records in CISA KEV

No Ldap Wp Login / Active Directory Integration Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ldap Wp Login / Active Directory Integration 1 record HIGH

Records

1 record

TI-2022-02758 CVE-2022-2987 · GHSA-mh2q-2wc7-4q2g

Ldap WP Login / Active Directory Integration < 3.0.2 - Unauthenticated Settings Update to Auth Bypass

Priority HIGH 72

The Ldap WP Login / Active Directory Integration WordPress plugin before 3.0.2 does not have any authorisation and CSRF checks when updating it's settings (which are hooked to the init action), allowing unauthenticated a…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00518 Published 2022-09-26 Fixed in 3.0.2 CWE-352
Open these records in search →