authLdap

Explore authLdap vulnerabilities across all versions. Currently tracking 2 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSLow

3.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all authLdap vulnerabilities before they are exploited.

Vulnerability Records

2 records


2023-09-01 00:00	authLdap <= 2.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting authLdap <= 2.6.1	`CVE-2023-41655`	3.3 Low	Rio Darmawan	Yes
2023-09-01 00:00	authLdap <= 2.5.8 - Cross-Site Request Forgery authLdap <= 2.5.8	`CVE-2023-41654`	4.3 Medium	Rio Darmawan	Yes

Showing 1–2 of 2 reports

Plugin Profile

Latestv3.1.4

authLdap

Author

heiglandreas

5.0(19)

100/100

Last Updated

2026-07-12 (17d ago)

Active Installs

4,000+

Downloads

142,114

Requires WP

2.5.0+

Requires PHP

7.4+

Tested up to

WP 7.0.2

Created

2010-08-27 (16y ago)

Use your existing LDAP as authentication-backend for your wordpress! So what are the differences to other WordPress-LDAP-Authentication-Plugins? Flexible: You are totaly free in which LDAP-backend to use. Due to the extensive configuration you can freely decide how to do the authentication of your users. It simply depends on your filters Independent: As soon as a user logs in, it is added/updated to the WordPress’ user-database to allow wordpress to always use the correct data. You only have to administer your users once. Failsafe: Due to the users being created in WordPress’ User-database they can also log in when the LDAP-backend currently is gone. Role-Aware: You can map WordPress’ roles to values of an existing LDAP-attribute. For more Information on the configuration have a look at https://github.com/heiglandreas/authLdap

View on WordPress.org