Simple LDAP Login

Explore Simple LDAP Login vulnerabilities across all versions. Currently tracking 1 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Simple LDAP Login vulnerabilities before they are exploited.

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Simple LDAP Login banner
Latestv1.6.1

Simple LDAP Login

Clifton Griffin

Author

Clifton Griffin

4.3(18)
86/100
Last Updated
2024-09-26 (2y ago)
Active Installs
1,000+
Downloads
111,234
Requires WP
3.4+
Requires PHP
0+
Tested up to
WP 6.6.5
Created
2008-10-30 (18y ago)

Having a single login for every service is a must in large organizations. This plugin allows you to integrate WordPress with LDAP quickly and easily. Like, really really easy. Contributing This is a community project now. Most development is done by users like you who find bugs and fix them, or find new ways to make the plugin more powerful for everyone. The easiest way to contribute to this plugin is to submit a GitHub pull request. Here’s the repo: https://github.com/clifgriffin/simple-ldap-login Support If you need support, file an issue here: https://github.com/clifgriffin/simple-ldap-login/issues Special Requests If you need a customization or change specific to your install, I am available for hire. Shoot me an e-mail: clifgriffin[at]gmail.com Features Supports Active Directory and OpenLDAP (and other directory systems which comply to the LDAP standard, such as OpenDS) Supports TLS Uses up-to-date methods for WordPress authentication routines. Authenticates existing WordPress usernames against LDAP. Can be configured to automatically create WordPress users for valid LDAP logins. You can restrict logins based on one or more LDAP groups. Intuitive control panel. Architecture Simple LDAP Login adds an authentication filter to WordPress that authentication requests must pass. In doing so, it makes several decisions. Can the provided credentials be authenticated against LDAP? If so, is the LDAP user a member of the required LDAP groups (if any)? Does a matching WordPress user exist? If so, log the user in. If not, is user creation enabled? Create the user and log them in. This is high level overview. This should answer the philosophical questions about how the plugin works. If the plugin is unable to authenticate the user, it should pass it down the chain to WordPress. (Unless LDAP Exclusive is turned on, in which case it won’t.)

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C