Security Resilience

CVE-2023-0812

Miniorange Active Directory Integration \/ Ldap Integration ≤ 4.1.1

Public PoC
Published
15 May 2023
Modified
24 January 2025
CVSS Score v3.1 7.5
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score 0.0082 56th percentile
Risk Priority 59 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-0812 is a high-severity an unspecified weakness vulnerability in Miniorange Active Directory Integration \/ Ldap Integration. Its CVSS base score is 7.5 (High).

Operationally, ranked in the top 44% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability Data

The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.1 does not have proper authorization or nonce values for some POST requests, leading to unauthenticated data disclosure.

CWE(s)
None listed

Related Threats

CVEs Like This One

CVE-2023-4506Same product: Miniorange Active Directory Integration \/ Ldap Integration
CVE-2023-2599Same product: Miniorange Active Directory Integration \/ Ldap Integration
CVE-2023-5003Same product: Miniorange Active Directory Integration \/ Ldap Integration
CVE-2023-3447Same product: Miniorange Active Directory Integration \/ Ldap Integration
CVE-2023-2484Same product: Miniorange Active Directory Integration \/ Ldap Integration
CVE-2023-4505Same product class: directory / identity
CVE-2023-4757Same product class: directory / identity
CVE-2023-23749Same product class: directory / identity
CVE-2026-78574Same product class: directory / identity
CVE-2026-42901Same product class: directory / identity

Affected Assets

miniorange
active directory integration \/ ldap integration
≤ 4.1.1

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References