Описание
The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.1 does not have proper authorization or nonce values for some POST requests, leading to unauthenticated data disclosure.
Уязвимые конфигурации
Конфигурация 1Версия до 4.1.1 (исключая)
cpe:2.3:a:miniorange:active_directory_integration_\/_ldap_integration:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 55%
0.00321
Низкий
7.5 High
CVSS3
Дефекты
Связанные уязвимости
CVSS3: 7.5
github
больше 2 лет назад
The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.1 does not have proper authorization or nonce values for some POST requests, leading to unauthenticated data disclosure.
EPSS
Процентиль: 55%
0.00321
Низкий
7.5 High
CVSS3