CVE-2023-5003 is a critical vulnerability affecting the Active Directory Integration / LDAP Integration WordPress plugin prior to version 4.1.10. It allows for sensitive LDAP log disclosure due to the plugin storing these logs in a persistent, publicly accessible buffer file after an administrator export. With a CVSS score of 7.5 (HIGH), this vulnerability presents a low-complexity, unauthenticated attack vector that can lead to complete confidentiality compromise (C:H) of sensitive LDAP data. While not listed in CISA's KEV catalog, a Nuclei template exists for exploitation, and its high EPSS score (0.77787) suggests a significant likelihood of exploitation despite minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 4.1.10CPE matchmatch criteria | cpe:2.3:a:miniorange:active_directory_integration_\/_ldap_integration:*:*:*:*:*:wordpress:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.