Unknown Active Directory Integration / LDAP Integration vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown Active Directory Integration / LDAP Integration, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2023-0812miniorangeactive_directory_integration_\/_ldap_integration+2
EPSS score
0.82%
The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.1 does not have proper authorization or nonce values for some POST requests, leading to unauthenticated data disclosure.7.5CVE-2023-5003miniorangeactive_directory_integration_\/_ldap_integration+3
EPSS score
26.63%
The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.10 stores sensitive LDAP logs in a buffer file when an administrator wants to export said logs. Unfortunately, this log file is never removed, and remains accessible to any users knowing the URL to do so.