Input validation vulnerability in Active Directory Integration / LDAP Integration 4.1.4

The Active Directory Integration plugin for WordPress, up to version 4.1.4, has a security vulnerability that makes it possible for unauthenticated attackers to send a forged request that could cause resource exhaustion. This happens because the plugin is missing a verification system to check the information sent in the request, and it does not properly protect or prepare the information before it is used in a SQL query. As a result, the attackers can add their own SQL query to the existing one and trick an administrator into performing an action like clicking on a link.