[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1agrAOJVoJU8DlfdKIEiqRqDQGHjH7H5eqIy0vWSVhA":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":37,"analysis":148,"fingerprints":363},"active-directory-employee-list","Active Directory Employee Listing","0.2.1a","Curtiss Grymala","https:\u002F\u002Fprofiles.wordpress.org\u002Fcgrymala\u002F","\u003Cp>This plugin allows you to query an active directory server to retrieve an optionally filtered list of users and display it as a list within a WordPress site. Some of the features of this plugin include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Widget – a widget is provided, with a few filtering\u002Fformatting options, to allow you to display a user list in any widgetized area\u003C\u002Fli>\n\u003Cli>Shortcode – a shortcode is provided, with all of the plugin’s filtering\u002Fformatting options, to allow you to display a user list within any page or post\u003C\u002Fli>\n\u003Cli>Output builder – a full-featured output builder is provided, allowing you to completely customize the format in which each user is displayed within the list. The output builder even allows conditional (if…elseif…else) statements.\u003C\u002Fli>\n\u003Cli>Format options – in addition to the output builder (which is used for each individual user), the following formatting options are also available:\n\u003Cul>\n\u003Cli>before_list – Any HTML code you would like to appear before the list of employees. This code is output before the opening title_wrap tag.\u003C\u002Fli>\n\u003Cli>after_list – Any HTML code you would like to appear after the list of employees. This code is output after the closing list_wrap tag.\u003C\u002Fli>\n\u003Cli>after_title – Any HTML code you would like to appear between the closing title_wrap tag and the opening list_wrap tag.\u003C\u002Fli>\n\u003Cli>title_wrap – The HTML element you would like to use to wrap the list title (if set). Just the element name, please; no opening or closing brackets.\u003C\u002Fli>\n\u003Cli>title_class – The CSS class you would like applied to the list title (if set). If you would prefer that no CSS class be applied to the title, leave this blank.\u003C\u002Fli>\n\u003Cli>title_id – If you would like to apply an HTML ID to the list title, you can indicate that here. Remember that IDs should be unique, so, if you plan on using multiple employee lists on a single page, you should leave this blank.\u003C\u002Fli>\n\u003Cli>title – The title you would like to appear at the top of the list. The title is output prior to the opening of the list itself.\u003C\u002Fli>\n\u003Cli>list_wrap – The HTML element you would like to use to wrap the entire list. Just the element name, please; no opening or closing brackets.\u003C\u002Fli>\n\u003Cli>list_class – The CSS class you would like to assign to the opening list_wrap tag, aiding in styling the entire list. If you would prefer that no CSS class be applied to the list, leave this blank.\u003C\u002Fli>\n\u003Cli>list_id – If you would like to apply an HTML ID to the list itself, you can indicate that here. Remember that IDs should be unique, so, if you plan on using multiple employee lists on a single page, you should leave this blank.\u003C\u002Fli>\n\u003Cli>item_wrap – The HTML element you would like to use to wrap each individual employee in the list. Just the element name, please; no opening or closing brackets.\u003C\u002Fli>\n\u003Cli>item_class – The CSS class you would like to assign to each individual employee in the list. If you would prefer that no CSS class be applied to the list, leave this blank.\u003C\u002Fli>\n\u003Cli>item_id – If you would like to apply an HTML ID to each individual employee in the list, you can indicate that here. You can use placeholder variables for user information (any of the fields that are set to be retrieved, plus the user’s username (samaccountname). Simply wrap the placeholder variable with percent symbols (so, to use a placeholder for samaccountname, use %samaccountname%) All disallowed characters (the @ symbol, dots, spaces, etc.) will be replaced with hyphens. Remember that IDs should be unique, so, if you plan on using multiple employee lists that may include the same employee multiple times on a single page, you should leave this blank. Likewise, you should use a placeholder variable that will be unique.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Field chooser – choose which Active Directory fields to retrieve from the server (note that any fields included in the output builder must be chosen in the field chooser, otherwise they won’t be retrieved and, therefore, won’t be displayed)\u003C\u002Fli>\n\u003Cli>Single user display – feed a username to the shortcode or widget, and a single user will be retrieved and displayed, rather than a list of users\u003C\u002Fli>\n\u003Cli>Search form – a simple search form (the input keyword is searched against all fields being retrieved) is provided\u003C\u002Fli>\n\u003Cli>Multisite-compatible – Options can be set for the entire network, and can be overridden on each individual site within the network. Some options can even be overridden in the widget or shortcode itself.\u003C\u002Fli>\n\u003Cli>Information cache – Information retrieved by this plugin is cached for 24 hours after it is retrieved (this option is not currently configurable, but will probably be in future versions) in order to avoid hitting the AD server more than necessary.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You can connect to the Active Directory server using SSL and\u002For TLS, if desired. You can also provide multiple Active Directory server addresses to allow load-balancing (a random server is chosen from the list before connecting and querying).\u003C\u002Fp>\n\u003Ch4>Compatibility Note and Credits\u003C\u002Fh4>\n\u003Cp>This plugin currently utilizes version 3.3.2 (with some extended functionality built specifically for this plugin) of the \u003Ca href=\"http:\u002F\u002Fadldap.sourceforge.net\u002F\" rel=\"nofollow ugc\">adLDAP class\u003C\u002Fa> from Scott Barnett & Richard Hyland. It has also been tested with version 3.1-Extended and version 3.3.2-Extended as they are included with various versions of the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Factive-directory-authentication-integration\u002F\" rel=\"ugc\">Active Directory Authentication Integration\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Factive-directory-integration\u002F\" rel=\"ugc\">Active Directory Integration\u003C\u002Fa> plugins. This plugin is potentially incompatible (and has not been tested) with Active Directory Integration, though; as it all depends on in which order the adLDAP class is instantiated (if this plugin’s copy of adLDAP is included before that plugin’s version, that plugin may not work properly).\u003C\u002Fp>\n\u003Cp>This plugin was developed by \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fprofile\u002Fcgrymala\" rel=\"ugc\">Curtiss Grymala\u003C\u002Fa> for the \u003Ca href=\"http:\u002F\u002Fumw.edu\u002F\" rel=\"nofollow ugc\">University of Mary Washington\u003C\u002Fa>. It is licensed under the GPL2, which basically means you can take it, break it and change it any way you want, as long as the original credit and license information remains somewhere in the package.\u003C\u002Fp>\n\u003Ch4>Important Note\u003C\u002Fh4>\n\u003Cp>At this time, this plugin has only been tested on a handful of WordPress installations (all on similar server configurations) with a single Active Directory server, so it is entirely possible that there will be bugs or errors that stop it (or other plugins) from working properly. In order to improve this plugin, please share any feedback you have.\u003C\u002Fp>\n\u003Ch3>To Do\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Implement pagination\u003C\u002Fli>\n\u003Cli>Provide a work-around for the PHP “paging” error\u003C\u002Fli>\n\u003Cli>Investigate allowing results to be filtered by multiple groups\u003C\u002Fli>\n\u003Cli>Investigate allowing results to be filtered by multiple usernames\u003C\u002Fli>\n\u003C\u002Ful>\n","Retrieve lists of active directory users and display them in WordPress.",10,6049,0,"2011-06-16T16:06:00.000Z","3.2.1","3.1","",[19,20,21,22,23],"active-directory","directory","employees","ldap","users","http:\u002F\u002Fplugins.ten-321.com\u002Factive-directory-employee-list\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Factive-directory-employee-list.0.2.1a.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":33,"avg_security_score":34,"avg_patch_time_days":35,"trust_score":26,"computed_at":36},"cgrymala",8,2340,87,30,"2026-04-04T05:38:10.501Z",[38,63,87,105,128],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":48,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":52,"requires_php":53,"tags":54,"homepage":58,"download_link":59,"security_score":60,"vuln_count":61,"unpatched_count":13,"last_vuln_date":62,"fetched_at":28},"authldap","authLdap","3.1.3","heiglandreas","https:\u002F\u002Fprofiles.wordpress.org\u002Fheiglandreas\u002F","\u003Cp>Use your existing LDAP as authentication-backend for your wordpress!\u003C\u002Fp>\n\u003Cp>So what are the differences to other WordPress-LDAP-Authentication-Plugins?\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Flexible: You are totaly free in which LDAP-backend to use. Due to the extensive configuration you can freely decide how to do the authentication of your users. It simply depends on your filters\u003C\u002Fli>\n\u003Cli>Independent: As soon as a user logs in, it is added\u002Fupdated to the WordPress’ user-database to allow wordpress to always use the correct data. You only have to administer your users once.\u003C\u002Fli>\n\u003Cli>Failsafe: Due to the users being created in WordPress’ User-database they can also log in when the LDAP-backend currently is gone.\u003C\u002Fli>\n\u003Cli>Role-Aware: You can map WordPress’ roles to values of an existing LDAP-attribute.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For more Information on the configuration have a look at https:\u002F\u002Fgithub.com\u002Fheiglandreas\u002FauthLdap\u003C\u002Fp>\n","Use your existing LDAP flexible as authentication backend for WordPress",5000,135169,100,19,"2025-04-16T05:47:00.000Z","6.8.5","2.5.0","7.4",[19,55,56,22,57],"auth","authentication","openldap","https:\u002F\u002Fgithub.com\u002Fheiglandreas\u002FauthLdap","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fauthldap.3.1.3.zip",99,2,"2023-09-01 00:00:00",{"slug":64,"name":65,"version":66,"author":67,"author_profile":68,"description":69,"short_description":70,"active_installs":71,"downloaded":72,"rating":73,"num_ratings":74,"last_updated":75,"tested_up_to":76,"requires_at_least":77,"requires_php":78,"tags":79,"homepage":82,"download_link":83,"security_score":84,"vuln_count":85,"unpatched_count":13,"last_vuln_date":86,"fetched_at":28},"ldap-login-for-intranet-sites","Active Directory Integration \u002F LDAP Integration","5.4.0","miniOrange","https:\u002F\u002Fprofiles.wordpress.org\u002Fcyberlord92\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fwordpress-ldap-login-intranet-sites?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration#Features\" rel=\"nofollow ugc\">Features\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fstep-by-step-guide-for-wordpress-ldap-login-plugin?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Setup Guide\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fwordpress-ldap-setup-guides?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fwordpress-ldap-login-intranet-sites?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration#Add-Ons\" rel=\"nofollow ugc\">Integrations\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fwww.miniorange.com\u002Fcontact?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Contact Us\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fwordpress-ldap-login-intranet-sites?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Active Directory Integration \u002F LDAP Integration Login for Intranet Sites plugin\u003C\u002Fa>   lets users sign in to WordPress using their LDAP or Active Directory credentials. It maps LDAP and Active Directory attributes to WordPress user fields, syncs profiles on login, and assigns roles based on directory groups or OUs.\u003C\u002Fp>\n\u003Cp>This plugin supports:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Microsoft Active Directory\u003C\u002Fli>\n\u003Cli>Azure Active Directory\u003C\u002Fli>\n\u003Cli>Sun Active Directory\u003C\u002Fli>\n\u003Cli>OpenLDAP Directory\u003C\u002Fli>\n\u003Cli>JumpCloud\u003C\u002Fli>\n\u003Cli>FreeIPA Directory\u003C\u002Fli>\n\u003Cli>Synology\u003C\u002Fli>\n\u003Cli>\n\u003Cp>OpenDS and other LDAP directories.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>You can fetch LDAP OUs, map LDAP attributes, test LDAP and Active Directory authentication, and review LDAP authentication reports for failed login attempts.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>This plugin brings centralized LDAP and Active Directory-based authentication, improves access control, and keeps your WordPress user information consistent with your directory source.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>How the Plugin Works:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>When a user enters their details on the WordPress login page, the plugin sends an LDAP or Active Directory authentication request to your directory server. If the LDAP or AD credentials match, the user is logged in, and a WordPress account is created or updated.\u003C\u002Fp>\n\u003Cp>During LDAP or Active Directory login, the plugin can:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Read LDAP and AD attributes\u003C\u002Fli>\n\u003Cli>Map LDAP attributes to WordPress profile fields\u003C\u002Fli>\n\u003Cli>Assign WordPress roles based on LDAP or Active Directory groups and OUs\u003C\u002Fli>\n\u003Cli>Sync LDAP or AD user data on every login\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You can enable LDAP secure connection (LDAPS) or Kerberos \u002F NTLM for passwordless AD login on domain-joined machines. LDAP filters, multiple LDAP search bases, and backup LDAP servers can be configured when needed. LDAP authentication failures are logged for security review.\u003C\u002Fp>\n\u003Cp>This ensures WordPress uses your LDAP or Active Directory server as the main source of truth for identity and login.\u003C\u002Fp>\n\u003Cp>Plugin\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fstep-by-step-guide-for-wordpress-ldap-login-plugin?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">LDAP\u002FActive Directory Login for Intranet Sites Plugin\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fguide-to-configure-miniorange-ldap-login-premium-plugin-for-wordpress?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">LDAP\u002FActive Directory login for Intranet Sites Premium Plugin\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fguide-to-setup-multisite-ldap-ad-plugin?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">LDAP\u002FActive Directory login for Intranet Sites Premium Plugin for Multisite\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fstep-by-step-guide-for-wordpress-ldap-login-cloud?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">LDAP\u002FActive Directory login for Cloud\u002FShared Hosting Plugin\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Add Ons\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fguide-to-setup-kerberos-single-sign-sso?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Kerberos Single Sign On (SSO)\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fguide-to-configure-miniorange-directory-sync-add-on-for-wordpress?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Sync User LDAP Directory\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fconfigure-miniorange-profile-picture-map-add-on-for-wordpress?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Profile Picture Sync for WordPress and BuddyPress\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fsetup-active-directory-ldap-users-search-plugin?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Search Staff\u002FEmployee from LDAP Active Directory\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fguide-to-setup-password-sync-with-ldap-add-on?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Password Sync with LDAP Server\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Minimum Requirements\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Compatible with WordPress version 5.0 or higher\u003C\u002Fli>\n\u003Cli>Compatible with PHP version 5.6.0 or higher\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ffaq.miniorange.com\u002Fknowledgebase\u002Fhow-to-enable-php-ldap-extension\u002F?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">PHP LDAP extension Enabled\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Get a quick overview of our product\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FVdAIDLCN-cQ?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features of the AD Integration\u002F LDAP Integration Login for Intranet Sites Plugin\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>The LDAP\u002FActive Directory Login for Intranet sites plugin includes user management features as well, such as adding users from Active Directory or another LDAP Directory who are not registered in WordPress, WordPress role mapping, LDAP\u002FActive Directory to WordPress attribute mapping, and more. We also provide additional add-ons that enhance the functionality of the basic plugin such as enabling \u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fkerberos-authentication-support?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Kerberos\u002FNTLM SSO Authentication\u003C\u002Fa>, importing users from Active Directory\u002FLDAP Server to WordPress, creating users in Active Directory\u002FLDAP server when created\u002Fregistered in the WordPress site, sync users between the Active Directory\u002FLDAP server and WordPress site, sync LDAP\u002FActive Directory Profile Picture thumbnail attribute to WordPress user profile picture, AD integration with third-party plugins and more.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>What is Kerberos\u002FNTLM Single Sign On (SSO)\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Effortlessly enable Single Sign-On (SSO) within your Active Directory-secured intranet using \u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fntlm-kerberos-authentication-mechanism\" rel=\"nofollow ugc\">Kerberos\u002FNTLM authentication\u003C\u002Fa>. Enjoy passwordless login for domain-joined machines and enhanced security through restricted external access. With cross-platform compatibility, \u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fsteps-setup-kerberos-windows-authentication\" rel=\"nofollow ugc\">Kerberos authentication across Windows\u003C\u002Fa> is also ensured. \u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fsteps-to-setup-kerberos-on-ubuntu-rhel-centos\" rel=\"nofollow ugc\">Kerberos authentication can also be done access Ubuntu, CentOS, and RHEL\u003C\u002Fa>, protecting against unauthorized access and impersonation threats. You can also configure \u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fsteps-to-setup-ntlm-sso-with-apache-on-windows\" rel=\"nofollow ugc\">Kerberos\u002FNTLM SSO with Apache on Windows\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Benefits of Kerberos Authentication Protocol\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Secure Authentication\u003C\u002Fstrong>: Strong cryptography ensures safe access to systems and resources.\u003Cbr \u002F>\n\u003Cstrong>Mutual Authentication\u003C\u002Fstrong>: Verifies both client and server identities to prevent impersonation.\u003Cbr \u002F>\n\u003Cstrong>Cross-Platform Compatibility\u003C\u002Fstrong>: Supports diverse operating systems and applications for broad SSO adoption.\u003C\u002Fp>\n\u003Ch4>Free Version Features:-\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>LDAP \u002F Active Directory Login:\u003C\u002Fstrong> Authenticate users by verifying their LDAP or Active Directory credentials instead of storing separate credentials in WordPress. This gives your intranet a centralized login system.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>LDAP User Auto Creation:\u003C\u002Fstrong> When a directory user logs in for the first time, the plugin creates a matching WordPress account automatically. No manual user creation required.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>LDAP Profile Sync:\u003C\u002Fstrong> Update a user’s WordPress profile on every login by pulling details such as name, email, and username from your directory server.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Default Role Mapping:\u003C\u002Fstrong> Assign a default WordPress role to all authenticated directory users to maintain consistent permissions across your intranet.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>LDAP Attribute Mapping:\u003C\u002Fstrong> Map directory attributes like mail, sAMAccountName, UID, or CN to WordPress user fields. This keeps user information aligned between systems.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.miniorange.com\u002Fguide-to-setup-ldaps-on-windows-server?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">LDAPS Support\u003C\u002Fa>:\u003C\u002Fstrong> Encrypt all authentication traffic between WordPress and your directory server using LDAPS. This protects credentials from being intercepted.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>LDAP Authentication Reports:\u003C\u002Fstrong> Record all failed LDAP or Active Directory login attempts. Admins can export these logs to review potential security issues or misconfigurations.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Add WordPress Users to LDAP:\u003C\u002Fstrong> When a new user registers on WordPress, the plugin can automatically create or update the corresponding account in your directory (when supported).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>LDAP OU Fetching:\u003C\u002Fstrong> Automatically pull Organization Units (OUs) from your directory to help you set up the correct search base during configuration.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>LDAP Connection Test:\u003C\u002Fstrong> Test your directory hostname, port, bind details, and search base before enabling login to ensure everything works as expected.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Demo LDAP Server:\u003C\u002Fstrong> Use the built-in demo directory to try the plugin without connecting your production LDAP or Active Directory environment.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Hybrid LDAP Support:\u003C\u002Fstrong> Support configurations where part of your environment runs on-prem Active Directory and part uses cloud directory services.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WordPress Compatibility:\u003C\u002Fstrong> Fully compatible with the latest WordPress and PHP versions. Includes documentation, setup videos, and easy configuration screens.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>You can find out how to configure the (AD Integration) Active Directory Integration \u002F LDAP Integration plugin through the video below\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F5DUGgP-Hf-k?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>This LDAP\u002FActive Directory Login (AD Login) plugin is free to use under the Expat license. If you wish to use enhanced features, you may purchase our \u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fwordpress-ldap-login-intranet-sites?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Premium version\u003C\u002Fa>. We also provide additional \u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fwordpress-ldap-login-intranet-sites?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration#Add-Ons\" rel=\"nofollow ugc\">add-ons\u003C\u002Fa> that enhance the functionality of the basic WordPress LDAP\u002FAD Login plugin. This will help support further development of our LDAP plugin, and in turn, serve our customers better.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fwordpress-ldap-login-intranet-sites?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Premium Version Features\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Our premium plugin includes additional features, as well as the aforementioned free plugin features. \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Login with Any LDAP Attribute:\u003C\u002Fstrong> Authenticate users using attributes like sAMAccountName, UPN, mail, UID, or any custom field defined in your directory schema.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Advanced LDAP \u002F AD Role Mapping:\u003C\u002Fstrong> Assign roles dynamically based on a user’s group membership or OU. You can create multiple mapping rules for different user segments.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>LDAP Group Fetching:\u003C\u002Fstrong> Automatically fetch directory security groups to simplify role-mapping setup inside WordPress.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Extended LDAP Attribute Mapping:\u003C\u002Fstrong> Map extended directory attributes such as givenName, sn, telephoneNumber, and custom schema fields to WordPress user meta.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom LDAP Attribute Support:\u003C\u002Fstrong> Create custom WordPress profile fields and link them to any attribute available in your directory server.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom LDAP \u002F AD Search Filters:\u003C\u002Fstrong> Restrict login using rules based on group membership, userAccountControl flags, or any advanced LDAP filter.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multiple LDAP Search Bases:\u003C\u002Fstrong> Authenticate users across multiple OUs or directory paths without duplicating configuration.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multi-Directory Login:\u003C\u002Fstrong> Connect WordPress to multiple LDAP or Active Directory domains. The plugin can try each directory in sequence or route users based on domain rules.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WordPress to Directory Sync:\u003C\u002Fstrong> Push WordPress profile updates back to your directory server to maintain consistency in both directions.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Dual Authentication Mode:\u003C\u002Fstrong> Allow both directory users and native WordPress users to log in. Useful for mixed environments or admin-only local access.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Post Login Redirects:\u003C\u002Fstrong> Send users to a custom URL, homepage, or profile page after successful login.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Detailed LDAP Authentication Logs:\u003C\u002Fstrong> Collect detailed logs for each failed authentication attempt, including reason codes, timestamps, and directory responses.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Import \u002F Export Plugin Configuration:\u003C\u002Fstrong> Export your plugin setup from staging and import it into production to avoid repetitive configuration work.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fguide-to-setup-multisite-ldap-ad-plugin?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Multisite LDAP \u002F AD Support\u003C\u002Fa>:\u003C\u002Fstrong> Configure your directory connection at the network level and apply it to selected subsites in a WordPress multisite network.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Role-Based Login Restrictions:\u003C\u002Fstrong> Restrict login based on assigned WordPress roles when running mixed login environments.\u003C\u002Fli>\n\u003Cli>Provides seamless AD integration with \u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fwordpress-ldap-login-intranet-sites?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration#Add-Ons\" rel=\"nofollow ugc\">third-party plugins\u003C\u002Fa> such as BuddyBoss, BuddyPress, Ultimate Member, Gravity Forms, Groups, and eMember.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>You can find out Active Directory Integration \u002F LDAP Integration Premium Version Features through the video below\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002Fr0pnB2d0QP8?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fwordpress-ldap-login-intranet-sites?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration#Add-Ons\" rel=\"nofollow ugc\">Add-ons List\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fguide-to-setup-kerberos-single-sign-sso?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Active Directory Single Sign-On (SSO) using Kerberos\u002FNTLM\u003C\u002Fa>:\u003C\u002Fstrong> Enable passwordless SSO for domain-joined machines using Kerberos or NTLM. Works with Apache, IIS, Windows with Apache, and GSSAPI-based authentication.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fguide-to-configure-miniorange-directory-sync-add-on-for-wordpress?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Sync Users LDAP Directory\u003C\u002Fa>:\u003C\u002Fstrong> Import directory users into WordPress and schedule ongoing synchronizations. Supports bidirectional sync when enabled.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fguide-to-setup-miniorange-ldap-buddypress-integration-add-on?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Sync BuddyPress Extended Profiles\u003C\u002Fa>:\u003C\u002Fstrong> Pull directory attributes into BuddyPress extended profile fields during login.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fguide-to-setup-password-sync-with-ldap-add-on?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Password Sync with Active Directory\u002FLDAP Directory\u003C\u002Fa>:\u003C\u002Fstrong> Sync password changes made in WordPress back to your directory server, keeping credentials aligned.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fconfigure-miniorange-profile-picture-map-add-on-for-wordpress?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Profile Picture Sync for WordPress and BuddyPress\u003C\u002Fa>:\u003C\u002Fstrong> Sync thumbnail photos from your directory into WordPress or BuddyPress profile pictures.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fguide-to-setup-ultimate-member-login-integration-with-ldap-credentials?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Ultimate Member Login and Profile Integration\u003C\u002Fa>:\u003C\u002Fstrong> Enable directory login in Ultimate Member forms and map directory fields to Ultimate Member profile fields.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Page\u002FPost Restriction:\u003C\u002Fstrong> Control access to specific pages or posts using LDAP groups or WordPress roles.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fguide-to-setup-miniorange-ldap-search-widget-add-on?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Search Staff From Active Directory\u002Fother LDAP Directory\u003C\u002Fa>:\u003C\u002Fstrong> Display directory users on a WordPress page using a searchable shortcode or widget.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fguide-to-setup-third-party-user-profile-integration-with-ldap-add-on?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Third-Party Plugin User Profile Integration\u003C\u002Fa>:\u003C\u002Fstrong> Sync directory attributes to user profiles created by other plugins.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Gravity Forms Integration:\u003C\u002Fstrong> Populate form fields with directory data and verify user identity during form submission.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fguide-to-setup-miniorange-ldap-buddypress-integration-add-on?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Sync BuddyPress Groups\u003C\u002Fa>:\u003C\u002Fstrong> Assign BuddyPress groups to users based on their directory group membership.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>MemberPress Plugin Integration:\u003C\u002Fstrong> Allow access to MemberPress-protected content using LDAP or Active Directory accounts.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>eMember Plugin Integration:\u003C\u002Fstrong> Enable directory login for eMember accounts.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WP Groups Plugin Integration:\u003C\u002Fstrong> Map directory groups to the Groups plugin user groups for permission-based workflows.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Use Cases\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fsso-multiple-ldap-ad-using-kerberos-ntlm-protocol?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Enable SSO for Multiple Active Directory Users on Domain-Joined Machines with Kerberos\u002FNTLM\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Enable seamless login for employees who use domain-joined computers. When a user is already signed into their workstation with their LDAP or Active Directory account, the plugin (with the Kerberos \u002F NTLM addon) can authenticate them automatically on WordPress without asking for a password. This gives your intranet a smooth, secure, and passwordless login flow.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fkerberos-ntlm-sso-for-wordpress-sites?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Enable MFA for External Access After LDAP Kerberos SSO\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Inside the intranet, users can rely on SSO through LDAP or Active Directory. But when someone logs in from outside the network or over VPN, you can require Multi-Factor Authentication (MFA). This protects sensitive content by verifying identity through both directory credentials and a second factor.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fldap-active-directory-group-based-authorization-in-wordpress?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Map LDAP\u002FAD Groups and Attributes to WordPress User Profiles\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Use directory groups and user attributes to assign WordPress roles automatically. For example, members of an “HR” group can be mapped to an editor role, while others receive subscriber or custom roles. This reduces manual user management and ensures permissions stay aligned with your organizational structure.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fuser-directory-sync-between-active-directory-and-wordpress?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Automate LDAP\u002FActive Directory Sync with WordPress for Seamless User Management\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Keep WordPress user accounts up to date by syncing them with LDAP or Active Directory schedules. This includes importing new users, updating profile details, syncing profile photos, and optionally enabling self-service password updates. This is useful for large teams where user details change often.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fwordpress-user-authentication-from-ldap-active-directory?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Enable Multiple LDAP Directories Support for WordPress Authentication and Synchronization\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>If your setup includes multiple directory domains or different LDAP servers, the plugin can authenticate users across all of them. It can try servers in sequence or route users based on their domain. This helps organizations with multi-forest, multi-tenant, or hybrid identity environments.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fguide-to-setup-multisite-ldap-ad-plugin?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">LDAP\u002FActive Directory Integration for WordPress Multisite Environments\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Manage LDAP or Active Directory authentication across an entire WordPress multisite network. Configure the directory connection once at the network level and apply it to selected subsites. Each site can inherit settings or define its own role mappings.\u003C\u002Fp>\n\u003Ch4>Other Use-Cases we support:-\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fwordpress-ldap-login-cloud?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">miniOrange Active Directory\u002FLDAP Integration for Cloud & Shared Hosting Platforms Plugin\u003C\u002Fa>\u003C\u002Fstrong> supports login to WordPress sites hosted on a shared hosting platform using credentials stored in active directory and LDAP Directory systems in case you are not able to enable \u003Cstrong>\u003Ca href=\"https:\u002F\u002Ffaq.miniorange.com\u002Fknowledgebase\u002Fhow-to-enable-php-ldap-extension\u002F?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">LDAP Extension\u003C\u002Fa>\u003C\u002Fstrong> on your site.\u003C\u002Fli>\n\u003Cli>\u003Cstrong> \u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fwordpress-ldap-directory-search?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Search Staff\u002FEmployee present in your Active Directory\u003C\u002Fa>\u003C\u002Fstrong>: Display employee information pulled directly from LDAP or Active Directory on your WordPress site. Users can search staff by name, email, department, or other attributes. This is useful for intranets, company portals, employee dashboards, and internal contact lists.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Integration with Different CMSs\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fsetup-ldap-ad-integration-for-expressionengine?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">LDAP\u002FActive Directory Integration for ExpressionEngine\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fldap-authentication-for-opencart?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">LDAP\u002FActive Directory Integration for OpenCart\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fplugins.miniorange.com\u002Fsetup-ldap-ad-integration-for-craft-cms?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">LDAP\u002FActive Directory Integration for Craft CMS\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Need support?\u003C\u002Fh4>\n\u003Cp>For support or troubleshooting help, please email us at info@xecurify.com or \u003Ca href=\"https:\u002F\u002Fwww.miniorange.com\u002Fcontact?utm_source=wordpress%20readme&utm_medium=marketplace&utm_campaign=Active%20Directory%20Integration%20\u002F%20LDAP%20Integration\" rel=\"nofollow ugc\">Contact us\u003C\u002Fa>.\u003C\u002Fp>\n","Active Directory Integration\u002FLDAP Integration enables login & sync in WordPress with Active Directory\u002FLDAP Directory credentials, 24\u002F7 ACTIVE SUPPORT",4000,322455,98,205,"2026-01-27T07:18:00.000Z","6.9.4","5.0","5.6.0",[19,80,56,22,81],"active-directory-integration","ldap-authentication","https:\u002F\u002Fminiorange.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fldap-login-for-intranet-sites.5.4.0.zip",97,7,"2023-09-25 00:00:00",{"slug":88,"name":89,"version":15,"author":90,"author_profile":91,"description":92,"short_description":93,"active_installs":94,"downloaded":95,"rating":96,"num_ratings":97,"last_updated":98,"tested_up_to":76,"requires_at_least":99,"requires_php":17,"tags":100,"homepage":103,"download_link":104,"security_score":48,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"next-active-directory-integration","Next Active Directory Integration","neosit","https:\u002F\u002Fprofiles.wordpress.org\u002Fneosit\u002F","\u003Cp>\u003Cem>Next Active Directory Integration\u003C\u002Fem> allows WordPress to authenticate, authorize, create and update users against Microsoft Active Directory. \u003Cem>NADI\u003C\u002Fem> ist a complete rewrite of its predecessor Active Directory Integration and therefore an own plugin.\u003Cbr \u002F>\nYou can easily import users from your Active Directory into your WordPress instance and keep both synchronized through \u003Cem>Next Active Directory Integration’s\u003C\u002Fem> features.\u003C\u002Fp>\n\u003Cp>Even if \u003Cem>NADI\u003C\u002Fem> is available for free we hope you purchase a plan to let us continue the work on Next Active Directory Integration.\u003Cbr \u002F>\nYou can purchase commercial support plans at \u003Ca href=\"https:\u002F\u002Fwww.active-directory-wp.com\u002Fshop-overview\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.active-directory-wp.com\u002Fshop-overview\u002F\u003C\u002Fa>. The support plans give you access to our premium extensions and guarantee an ongoing development of the plug-in.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Authenticating WordPress users against one or multiple AD Server\u003C\u002Fli>\n\u003Cli>Authorizing users by Active Directory group memberships\u003C\u002Fli>\n\u003Cli>Managing Active Directory authentication for WordPress Multisite installations\u003C\u002Fli>\n\u003Cli>Single Sign On with Kerberos sponsored by \u003Ca href=\"http:\u002F\u002Fcolt.net\" rel=\"nofollow ugc\">Colt Technology Services\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fapp.digitalelite.co.uk\u002F\" rel=\"nofollow ugc\">Digital Elite\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Automatically create and update WordPress users based upon their Active Directory membership\u003C\u002Fli>\n\u003Cli>Mapping of Active Directory security groups to WordPress roles\u003C\u002Fli>\n\u003Cli>Protection against brute force password hacking attacks\u003C\u002Fli>\n\u003Cli>User and\u002For admin e-mail notification on failed login attempts\u003C\u002Fli>\n\u003Cli>Multi-language support (at the moment only English is included)\u003C\u002Fli>\n\u003Cli>Determining WordPress display name from Active Directory attributes\u003C\u002Fli>\n\u003Cli>Synchronizing Active Directory attributes and WordPress user meta information in both ways\u003C\u002Fli>\n\u003Cli>Embed customized Active Directory attributes in WordPress user’s profile\u003C\u002Fli>\n\u003Cli>Enable\u002Fdisable password changes for local (non-Active Directory) WordPress users\u003C\u002Fli>\n\u003Cli>Disable user accounts in WordPress if they are disabled in Active Directory.\u003C\u002Fli>\n\u003Cli>Set users local WordPress password on first and\u002For on every successful login\u003C\u002Fli>\n\u003Cli>Option to disable fallback to local (WordPress) authentication.\u003C\u002Fli>\n\u003Cli>Support for Active Directory forest environments.\u003C\u002Fli>\n\u003Cli>and much much more\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Premium Extensions\u003C\u002Fh4>\n\u003Cp>As an owner of a valid support plan you have access to the following premium extensions:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Profile Pictures: Synchronize profile photos from Active Directory to WordPress without a 3rd party plug-in\u003C\u002Fli>\n\u003Cli>BuddyPress profile photo: Synchronize profile photos from Active Directory to BuddyPress\u003C\u002Fli>\n\u003Cli>Buddy Press simple attributes: Synchronize attributes from Active Directory\u002FNADI to BuddyPress’ custom profiles\u003C\u002Fli>\n\u003Cli>Login with Ultimate Member: Let UM users log in by using NADI\u003C\u002Fli>\n\u003Cli>Login with WooCommerce: Let WooCommerce users log in by using NADI\u003C\u002Fli>\n\u003Cli>WP-CLI: Execute common NADI tasks (Sync to WordPress, Sync to AD) with help of WP-CLI\u003C\u002Fli>\n\u003Cli>Active Directory Forest: Be able to use one WordPress instance with your whole Active Directory forest environment\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>WordPress since 5.6\u003C\u002Fli>\n\u003Cli>PHP >= 8.1\u003C\u002Fli>\n\u003Cli>LDAP support\u003C\u002Fli>\n\u003Cli>OpenSSL Support for TLS (recommended)\u003C\u002Fli>\n\u003C\u002Ful>\n","Next Active Directory Integration allows WordPress to authenticate, authorize, create and update users against Microsoft Active Directory.",2000,159243,96,16,"2025-11-28T09:08:00.000Z","5.6",[19,56,22,101,102],"sso","windows","https:\u002F\u002Fwww.active-directory-wp.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnext-active-directory-integration.3.2.1.zip",{"slug":106,"name":107,"version":108,"author":109,"author_profile":110,"description":111,"short_description":112,"active_installs":113,"downloaded":114,"rating":115,"num_ratings":116,"last_updated":117,"tested_up_to":118,"requires_at_least":119,"requires_php":17,"tags":120,"homepage":123,"download_link":124,"security_score":125,"vuln_count":126,"unpatched_count":13,"last_vuln_date":127,"fetched_at":28},"simple-ldap-login","Simple LDAP Login","1.6.1","Clifton Griffin","https:\u002F\u002Fprofiles.wordpress.org\u002Fclifgriffin\u002F","\u003Cp>Having a single login for every service is a must in large organizations. This plugin allows you to integrate WordPress with LDAP quickly and easily. Like, really really easy.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Contributing\u003C\u002Fstrong>\u003Cbr \u002F>\nThis is a community project now. Most development is done by users like you who find bugs and fix them, or find new ways to make the plugin more powerful for everyone.\u003C\u002Fp>\n\u003Cp>The easiest way to contribute to this plugin is to submit a GitHub pull request. Here’s the repo:\u003Cbr \u002F>\nhttps:\u002F\u002Fgithub.com\u002Fclifgriffin\u002Fsimple-ldap-login\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Support\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>If you need support, file an issue here:\u003Cbr \u002F>\nhttps:\u002F\u002Fgithub.com\u002Fclifgriffin\u002Fsimple-ldap-login\u002Fissues\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Special Requests\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>If you need a customization or change specific to your install, I am available for hire. Shoot me an e-mail: clifgriffin[at]gmail.com\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Supports Active Directory and OpenLDAP (and other directory systems which comply to the LDAP standard, such as OpenDS)\u003C\u002Fli>\n\u003Cli>Supports TLS\u003C\u002Fli>\n\u003Cli>Uses up-to-date methods for WordPress authentication routines.\u003C\u002Fli>\n\u003Cli>Authenticates existing WordPress usernames against LDAP.\u003C\u002Fli>\n\u003Cli>Can be configured to automatically create WordPress users for valid LDAP logins.\u003C\u002Fli>\n\u003Cli>You can restrict logins based on one or more LDAP groups.\u003C\u002Fli>\n\u003Cli>Intuitive control panel.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Architecture\u003C\u002Fh4>\n\u003Cp>Simple LDAP Login adds an authentication filter to WordPress that authentication requests must pass. In doing so, it makes several decisions.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Can the provided credentials be authenticated against LDAP?\u003C\u002Fli>\n\u003Cli>\n\u003Cul>\n\u003Cli>If so, is the LDAP user a member of the required LDAP groups (if any)?\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cul>\n\u003Cli>\n\u003Cul>\n\u003Cli>Does a matching WordPress user exist?\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cul>\n\u003Cli>\n\u003Cul>\n\u003Cli>\n\u003Cul>\n\u003Cli>If so, log the user in.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cul>\n\u003Cli>\n\u003Cul>\n\u003Cli>\n\u003Cul>\n\u003Cli>If not, is user creation enabled?\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cul>\n\u003Cli>\n\u003Cul>\n\u003Cli>\n\u003Cul>\n\u003Cli>\n\u003Cul>\n\u003Cli>Create the user and log them in.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This is high level overview. This should answer the philosophical questions about how the plugin works. If the plugin is unable to authenticate the user, it should pass it down the chain to WordPress. (Unless LDAP Exclusive is turned on, in which case it won’t.)\u003C\u002Fp>\n","Integrating WordPress with LDAP shouldn't be difficult. Now it isn't. Simple LDAP Login provides all of the features, none of the hassles.",1000,110171,86,18,"2024-09-26T15:41:00.000Z","6.6.5","3.4",[19,121,56,22,122],"adldap","login","https:\u002F\u002Fobjectiv.co","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-ldap-login.1.6.1.zip",91,1,"2024-09-27 00:00:00",{"slug":129,"name":130,"version":131,"author":132,"author_profile":133,"description":134,"short_description":135,"active_installs":48,"downloaded":136,"rating":137,"num_ratings":97,"last_updated":138,"tested_up_to":76,"requires_at_least":139,"requires_php":17,"tags":140,"homepage":143,"download_link":144,"security_score":145,"vuln_count":146,"unpatched_count":126,"last_vuln_date":147,"fetched_at":28},"employee-directory","Employee Directory – Staff & Team Directory","4.5.5","emarket-design","https:\u002F\u002Fprofiles.wordpress.org\u002Femarket-design\u002F","\u003Cp>\u003Cstrong>Employee Directory\u003C\u002Fstrong> is a flexible staff and team directory plugin that works out of the box for small teams and supports enterprise use cases such as intranets and centralized identity integration via official add-ons and the Professional version.\u003C\u002Fp>\n\u003Cp>Create a professional, searchable employee directory for your WordPress site. Display employees, faculty, or team members in a clean, filterable layout with photos, job titles, departments, locations, and custom fields. Visitors can browse or search by name, title, or department to quickly find the right person.\u003C\u002Fp>\n\u003Cp>Employee Directory supports a modular architecture designed for growing organizations. Start with a simple directory and extend it as your needs evolve.\u003C\u002Fp>\n\u003Ch3>Advanced Features & Integrations\u003C\u002Fh3>\n\u003Cp>Employee Directory supports advanced organizational and intranet use cases through official add-ons and the Professional version.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Available capabilities include:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Organizational hierarchies and org charts\u003C\u002Fli>\n\u003Cli>\u003Cstrong>LDAP \u002F Active Directory\u003C\u002Fstrong> integration\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Microsoft Entra ID (Azure AD)\u003C\u002Fstrong> integration\u003C\u002Fli>\n\u003Cli>Bulk employee data synchronization\u003C\u002Fli>\n\u003Cli>Workflow automation (optional, customizable feature)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Licensing\u003C\u002Fh3>\n\u003Cp>The Professional version and add-ons are licensed separately based on usage and include access to support.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>LIVE DEMO SITE\u003C\u002Fstrong>\u003Cbr \u002F>\n  \u003Ca href=\"https:\u002F\u002Femployee-directory-com.emdplugins.com?pk_campaign=employee-directory-com&pk_kwd=readme\" rel=\"nofollow ugc\">Employee Directory Starter Demo Site\u003C\u002Fa>\u003Cbr \u002F>\n  \u003Ca href=\"https:\u002F\u002Femployee-directory.emdplugins.com\u002F?pk_campaign=employee-directory-com&pk_kwd=readme\" rel=\"nofollow ugc\">Employee Directory Professional Demo Site\u003C\u002Fa>\u003Cbr \u002F>\n  Powerful | Easy to use | Beautiful\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch3>Getting Started\u003C\u002Fh3>\n\u003Cp>Watch our introduction video to quickly get started with Employee Directory.\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002Fz_vhhJz_uEc?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Employee Directory YouTube Playlist\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>A collection of videos explaining Employee Directory concepts, features, and setup:\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F-woxENYS8eY?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent&listType=playlist&list=PLxQpKElaVx8uROIRtpaATJTYr3HdPNybM\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>RELATED PLUGINS YOU MAY LIKE\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fkcentercom.emdplugins.com\u002F\" rel=\"nofollow ugc\">Knowledge Center Starter\u003C\u002Fa> — Knowledge base software for helping customers and employees find answers.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fespotlight-com.emdplugins.com\u002F\" rel=\"nofollow ugc\">Employee Spotlight Starter\u003C\u002Fa> — Display and manage staff profiles.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsimcom.emdplugins.com\u002F\" rel=\"nofollow ugc\">Software Issue Manager Starter\u003C\u002Fa> — Issue and project management solution.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Frequestaquote.emdplugins.com\u002F\" rel=\"nofollow ugc\">Request a Quote Starter\u003C\u002Fa> — Sales quoting solution for WordPress.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwpticketcom.emdplugins.com\u002F\" rel=\"nofollow ugc\">WP Ticket Starter\u003C\u002Fa> — Customer support and helpdesk ticketing.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwpeasycontactcom.emdplugins.com\u002F\" rel=\"nofollow ugc\">WP Easy Contact Starter\u003C\u002Fa> — Contact management solution for WordPress.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>This plugin was generated using \u003Ca href=\"https:\u002F\u002Fwpappstudio.com\u002F\" rel=\"nofollow ugc\">WP App Studio\u003C\u002Fa>.\u003C\u002Fp>\n","Flexible employee directory with enterprise add-ons for LDAP \u002F Active Directory, Microsoft Entra ID (Azure AD) and Premium features like org charts.",43243,82,"2026-02-25T07:51:00.000Z","4.5",[19,129,141,22,142],"intranet","staff-directory","https:\u002F\u002Femarketdesign.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Femployee-directory.4.5.5.zip",73,3,"2025-08-25 00:00:00",{"attackSurface":149,"codeSignals":209,"taintFlows":320,"riskAssessment":354,"analyzedAt":362},{"hooks":150,"ajaxHandlers":200,"restRoutes":201,"shortcodes":202,"cronEvents":208,"entryPointCount":126,"unprotectedCount":13},[151,157,159,163,167,170,174,178,182,185,188,192,195],{"type":152,"name":153,"callback":154,"file":155,"line":156},"action","plugins_loaded","init_active_directory_employee_list","active-directory-employee-list.php",29,{"type":152,"name":153,"callback":158,"file":155,"line":35},"add_adel_widget",{"type":152,"name":160,"callback":161,"file":155,"line":162},"widgets_init","closure",65,{"type":152,"name":164,"callback":164,"file":165,"line":166},"network_admin_menu","classes\\class-active-directory-employee-list-admin.php",107,{"type":152,"name":168,"callback":168,"file":165,"line":169},"admin_menu",108,{"type":152,"name":171,"callback":172,"file":165,"line":173},"admin_init","_init_admin",109,{"type":152,"name":175,"callback":176,"priority":60,"file":165,"line":177},"add_site_option","maybe_delete_site_option",111,{"type":152,"name":179,"callback":180,"priority":60,"file":165,"line":181},"add_option","maybe_delete_option",112,{"type":152,"name":183,"callback":176,"priority":60,"file":165,"line":184},"update_site_option",113,{"type":152,"name":186,"callback":180,"priority":60,"file":165,"line":187},"update_option",114,{"type":152,"name":189,"callback":190,"file":165,"line":191},"admin_notices","_ldap_not_supported",117,{"type":152,"name":193,"callback":190,"file":165,"line":194},"network_admin_notices",118,{"type":152,"name":196,"callback":197,"file":198,"line":199},"init","_init","classes\\class-active-directory-employee-list.php",221,[],[],[203],{"tag":204,"callback":205,"file":206,"line":207},"ad-employee-list","render_shortcode","classes\\class-active-directory-employee-list-output.php",538,[],{"dangerousFunctions":210,"sqlUsage":216,"outputEscaping":218,"fileOperations":13,"externalRequests":13,"nonceChecks":126,"capabilityChecks":61,"bundledLibraries":319},[211],{"fn":212,"file":213,"line":214,"context":215},"preg_replace(\u002Fe)","inc\\adLDAP.php",2282,"preg_replace('\u002F([\\x00-\\x1F\\*\\(\\)\\\\\\\\])\u002Fe'",{"prepared":13,"raw":13,"locations":217},[],{"escaped":219,"rawEcho":220,"locations":221},12,61,[222,225,227,228,229,231,232,233,235,236,237,239,240,241,242,244,245,246,247,249,250,251,252,253,255,257,259,260,262,264,266,268,270,272,274,276,278,280,282,285,287,288,290,292,293,295,297,298,300,301,303,305,306,307,308,310,311,312,314,316,318],{"file":165,"line":223,"context":224},136,"raw output",{"file":165,"line":226,"context":224},624,{"file":165,"line":226,"context":224},{"file":165,"line":226,"context":224},{"file":165,"line":230,"context":224},637,{"file":165,"line":230,"context":224},{"file":165,"line":230,"context":224},{"file":165,"line":234,"context":224},645,{"file":165,"line":234,"context":224},{"file":165,"line":234,"context":224},{"file":165,"line":238,"context":224},652,{"file":165,"line":238,"context":224},{"file":165,"line":238,"context":224},{"file":165,"line":238,"context":224},{"file":165,"line":243,"context":224},662,{"file":165,"line":243,"context":224},{"file":165,"line":243,"context":224},{"file":165,"line":243,"context":224},{"file":165,"line":248,"context":224},667,{"file":165,"line":248,"context":224},{"file":165,"line":248,"context":224},{"file":165,"line":248,"context":224},{"file":165,"line":248,"context":224},{"file":165,"line":254,"context":224},671,{"file":165,"line":256,"context":224},673,{"file":165,"line":258,"context":224},674,{"file":206,"line":177,"context":224},{"file":206,"line":261,"context":224},132,{"file":206,"line":263,"context":224},141,{"file":206,"line":265,"context":224},148,{"file":206,"line":267,"context":224},171,{"file":206,"line":269,"context":224},194,{"file":206,"line":271,"context":224},199,{"file":206,"line":273,"context":224},206,{"file":206,"line":275,"context":224},222,{"file":206,"line":277,"context":224},228,{"file":206,"line":279,"context":224},365,{"file":206,"line":281,"context":224},664,{"file":283,"line":284,"context":224},"classes\\class-active-directory-employee-list-widget.php",37,{"file":283,"line":286,"context":224},38,{"file":283,"line":286,"context":224},{"file":283,"line":289,"context":224},41,{"file":283,"line":291,"context":224},42,{"file":283,"line":291,"context":224},{"file":283,"line":294,"context":224},45,{"file":283,"line":296,"context":224},46,{"file":283,"line":296,"context":224},{"file":283,"line":299,"context":224},52,{"file":283,"line":299,"context":224},{"file":283,"line":302,"context":224},59,{"file":283,"line":304,"context":224},60,{"file":283,"line":304,"context":224},{"file":283,"line":162,"context":224},{"file":283,"line":162,"context":224},{"file":283,"line":309,"context":224},72,{"file":283,"line":145,"context":224},{"file":283,"line":145,"context":224},{"file":283,"line":313,"context":224},101,{"file":283,"line":315,"context":224},103,{"file":283,"line":317,"context":224},110,{"file":283,"line":181,"context":224},[],[321,339],{"entryPoint":322,"graph":323,"unsanitizedCount":126,"severity":338},"simple_search_form (classes\\class-active-directory-employee-list-output.php:654)",{"nodes":324,"edges":335},[325,330],{"id":326,"type":327,"label":328,"file":206,"line":329},"n0","source","$_REQUEST",660,{"id":331,"type":332,"label":333,"file":206,"line":281,"wp_function":334},"n1","sink","echo() [XSS]","echo",[336],{"from":326,"to":331,"sanitized":337},false,"medium",{"entryPoint":340,"graph":341,"unsanitizedCount":32,"severity":353},"\u003Cclass-active-directory-employee-list-output> (classes\\class-active-directory-employee-list-output.php:0)",{"nodes":342,"edges":350},[343,345,346,348],{"id":326,"type":327,"label":344,"file":206,"line":145},"$_GET (x7)",{"id":331,"type":332,"label":333,"file":206,"line":177,"wp_function":334},{"id":347,"type":327,"label":328,"file":206,"line":329},"n2",{"id":349,"type":332,"label":333,"file":206,"line":281,"wp_function":334},"n3",[351,352],{"from":326,"to":331,"sanitized":337},{"from":347,"to":349,"sanitized":337},"low",{"summary":355,"deductions":356},"The 'active-directory-employee-list' plugin v0.2.1a exhibits a generally good security posture with some notable areas for improvement. The plugin demonstrates strong adherence to secure coding practices by utilizing prepared statements for all SQL queries and implementing nonce and capability checks on its entry points.  Its limited attack surface, consisting solely of a shortcode, is a positive sign.  However, the static analysis reveals concerns regarding output escaping, with only 16% of outputs being properly sanitized. This could potentially lead to Cross-Site Scripting (XSS) vulnerabilities if user-supplied data is not handled carefully. Additionally, the presence of a dangerous function, 'preg_replace(\u002Fe)', warrants scrutiny as it can be misused for code execution if not properly constrained. The absence of known vulnerabilities in its history is a strength, suggesting a stable codebase, but this should not lead to complacency. The plugin's strengths lie in its secure database interactions and authentication mechanisms. The primary weakness stems from insufficient output sanitization, creating a potential XSS risk. Further investigation into the context and usage of the 'preg_replace(\u002Fe)' function is recommended.",[357,359],{"reason":358,"points":85},"Insufficient output escaping",{"reason":360,"points":361},"Presence of dangerous function 'preg_replace(\u002Fe)'",5,"2026-03-17T00:28:24.309Z",{"wat":364,"direct":375},{"assetPaths":365,"generatorPatterns":369,"scriptPaths":370,"versionParams":371},[366,367,368],"\u002Fwp-content\u002Fplugins\u002Factive-directory-employee-list\u002Fjs\u002Fadel-admin.js","\u002Fwp-content\u002Fplugins\u002Factive-directory-employee-list\u002Fjs\u002Fadel-search.js","\u002Fwp-content\u002Fplugins\u002Factive-directory-employee-list\u002Fcss\u002Fadel-admin.css",[],[366,367],[372,373,374],"active-directory-employee-list\u002Fjs\u002Fadel-admin.js?ver=","active-directory-employee-list\u002Fjs\u002Fadel-search.js?ver=","active-directory-employee-list\u002Fcss\u002Fadel-admin.css?ver=",{"cssClasses":376,"htmlComments":378,"htmlAttributes":379,"restEndpoints":381,"jsGlobals":382,"shortcodeOutput":384},[377],"adel-results",[],[380],"data-adel-ajax-url",[],[383],"adel_ajax_url",[385],"[adel-employee-list]"]