CVE-2023-3447

The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Injection in versions up to, and including, 4.1.5. This is due to insufficient escaping on the supplied username value. This makes it possible for attackers, with an existing account on a vulnerable WordPress instance, to extract potentially sensitive information from the LDAP directory.

• CWE-90

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2928150%40ldap-login-for-intranet-sites&new=2928150%40ldap-login-for-intranet-sites&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/cd7553e8-e43d-4740-b2ee-e3d8dc351e53?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2928150%40ldap-login-for-intranet-sites&new=2928150%40ldap-login-for-intranet-sites&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/cd7553e8-e43d-4740-b2ee-e3d8dc351e53?source=cveThird Party Advisory

Published

Jun 29, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-34464XWiki Platform is a generic wiki platform offering runtime s…5.4
• CVE-2023-34465XWiki Platform is a generic wiki platform. Starting in versi…8.1
• CVE-2023-34466XWiki Platform is a generic wiki platform offering runtime s…4.3
• CVE-2023-34467XWiki Platform is a generic wiki platform. Starting in versi…7.5
• CVE-2023-34468The DBCPConnectionPool and HikariCPConnectionPool Controller…8.8
• CVE-2023-34469 AMI AptioV contains a vulnerability in BIOS where an Attack…4.6
• CVE-2023-34470 AMI AptioV contains a vulnerability in BIOS where an Attack…7.8
• CVE-2023-34471 AMI SPx contains a vulnerability in the BMC where a user m…8.1
• CVE-2023-34472AMI SPx contains a vulnerability in the BMC where an Attacke…6.5
• CVE-2023-34473 AMI SPx contains a vulnerability in the BMC where a valid u…8.8
• CVE-2023-34474A heap-based buffer overflow issue was discovered in ImageMa…5.5
• CVE-2023-34475A heap use after free issue was discovered in ImageMagick's …5.5