Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 23:18:52 +0000 cnvd-2022-88246 https://cve.radiocsirt.org/vuln/cnvd-2022-88246 cnvd-2022-88246 https://cve.radiocsirt.org/vuln/cnvd-2022-88246 EUVD-2026-240850 https://cve.radiocsirt.org/vuln/euvd-2026-240850 EUVD-2026-240850 https://cve.radiocsirt.org/vuln/euvd-2026-240850 fkie_cve-2022-2987 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2987 <p>The Ldap WP Login / Active Directory Integration WordPress plugin before 3.0.2 does not have any authorisation and CSRF checks when updating it&#39;s settings (which are hooked to the init action), allowing unauthenticated attackers to update them. Attackers could set their own LDAP server to be used to authenticated users, therefore bypassing the current authentication</p> <p>The Ldap WP Login / Active Directory Integration WordPress plugin before 3.0.2 does not have any authorisation and CSRF checks when updating it&#39;s settings (which are hooked to the init action), allowing unauthenticated attackers to update them. Attackers could set their own LDAP server to be used to authenticated users, therefore bypassing the current authentication</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-2987 GHSA-mh2q-2wc7-4q2g https://cve.radiocsirt.org/vuln/ghsa-mh2q-2wc7-4q2g <p>The Ldap WP Login / Active Directory Integration WordPress plugin before 3.0.2 does not have any authorisation and CSRF checks when updating it&#39;s settings (which are hooked to the init action), allowing unauthenticated attackers to update them. Attackers could set their own LDAP server to be used to authenticated users, therefore bypassing the current authentication</p> <p>The Ldap WP Login / Active Directory Integration WordPress plugin before 3.0.2 does not have any authorisation and CSRF checks when updating it&#39;s settings (which are hooked to the init action), allowing unauthenticated attackers to update them. Attackers could set their own LDAP server to be used to authenticated users, therefore bypassing the current authentication</p> https://cve.radiocsirt.org/vuln/ghsa-mh2q-2wc7-4q2g gsd-2022-2987 https://cve.radiocsirt.org/vuln/gsd-2022-2987 gsd-2022-2987 https://cve.radiocsirt.org/vuln/gsd-2022-2987