https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T23:18:58.529770+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-88246 cnvd-2022-88246 2026-10-23T23:18:58.532809+00:00 cnvd-2022-88246 https://cve.radiocsirt.org/vuln/euvd-2026-240850 EUVD-2026-240850 2026-10-23T23:18:58.532839+00:00 EUVD-2026-240850 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2987 fkie_cve-2022-2987 2026-10-23T23:18:58.532853+00:00

The Ldap WP Login / Active Directory Integration WordPress plugin before 3.0.2 does not have any authorisation and CSRF checks when updating it's settings (which are hooked to the init action), allowing unauthenticated attackers to update them. Attackers could set their own LDAP server to be used to authenticated users, therefore bypassing the current authentication

 https://cve.radiocsirt.org/vuln/ghsa-mh2q-2wc7-4q2g GHSA-mh2q-2wc7-4q2g 2026-10-23T23:18:58.532882+00:00

The Ldap WP Login / Active Directory Integration WordPress plugin before 3.0.2 does not have any authorisation and CSRF checks when updating it's settings (which are hooked to the init action), allowing unauthenticated attackers to update them. Attackers could set their own LDAP server to be used to authenticated users, therefore bypassing the current authentication

 https://cve.radiocsirt.org/vuln/gsd-2022-2987 gsd-2022-2987 2026-10-23T23:18:58.532898+00:00 gsd-2022-2987