Miniorange Active Directory Integration / Ldap Integration — known CVE vulnerabilities

Every CVE whose affected-product data names Miniorange Active Directory Integration / Ldap Integration, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2023-3447 — CVSS 7.6 (high): The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Injection in versions up to, and including…
• CVE-2023-0812 — CVSS 7.5 (high): The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.1 does not have proper authorization or nonce values for…
• CVE-2023-5003 — CVSS 7.5 (high): The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.10 stores sensitive LDAP logs in a buffer file when an…
• CVE-2023-2484 — CVSS 7.2 (high): The Active Directory Integration plugin for WordPress is vulnerable to time-based SQL Injection via the orderby and order parameters in…
• CVE-2023-2599 — CVSS 3.1 (low): The Active Directory Integration plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to time-based SQL Injection via…
• CVE-2023-4506 — CVSS 2.2 (low): The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Passback in versions up to, and including…