CVE-2023-3447

Summary

CVE-2023-3447 is a vulnerability affecting the Active Directory Integration/LDAP Integration plugin for WordPress. Versions up to and including 4.1.5 are impacted. The issue stems from inadequate escaping of the provided username value, enabling unauthenticated attackers to carry out LDAP Injection. This vulnerability allows attackers to extract sensitive information from the LDAP directory.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.