5.4Mittel
WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability
ThimPress LearnPress
Subscriber Broken Access Control in LearnPress <= 4.4.10 versions.
ThimPress. Schwachstellen (CVE)
Für ThimPress. veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses 45LearnPress 36WP Hotel Booking 17WP Pipes 9LearnPress Export Import 5Eduma 4LearnPress – Backup & Migration Tool 4Thim Elementor Kit 4LearnPress – WordPress LMS Plugin 3Thim Core 3WP Events Manager 2RealPress 2Sailing 2Thim Kit for Elementor – Pre-built Templates & Widgets for Elementor 2BuilderPress 1LearnPress – Sepay Payment 1Coaching 1Course Builder 1FundPress 1Resca 1FundPress – WordPress Donation Plugin 1Ivy School 1Thim Blocks 1LearnPress – Course Review 1
7.5Hoch
WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability
ThimPress LearnPress
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11.
5.3Mittel
WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability
ThimPress LearnPress
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11.
5.4Mittel
WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability
ThimPress LearnPress
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11.
5.4Mittel
LearnPress before 4.4.10 Missing Authorization via Legacy Editor AJAX Handlers
ThimPress LearnPress
LearnPress before 4.4.10 contains a missing authorization vulnerability in the admin_course_editor, admin_quiz_editor and admin_question_editor lp-ajax actions, allowing instructors to modify other instructors' content. Authenticated instructors can reuse the…
5.4Mittel
WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability
ThimPress LearnPress
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.10.
6.5Mittel
LearnPress <= 4.4.10 - Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration via 'search-authors' AJAX Action
thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.10 This is due to the plugin not properly verifying that a user is authorized to perf…
9.8Kritisch
LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter
thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10 via deserialization of untrusted input from the 'checkout-email' request parameter during the checkout AJAX action. The value is passed through …
2.5%EPSS
7.2Hoch
LearnPress <= 4.4.10 - Unauthenticated Stored Cross-Site Scripting via 'quantity' and 'order_comments' Parameters
thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'quantity (REST) / order_comments (checkout)' parameter in all versions up to, and including, 4.4.10 due to insu…
7.1Hoch
WordPress LearnPress plugin <= 4.4.9 - Cross Site Scripting (XSS) vulnerability
ThimPress LearnPress
Unauthenticated Cross Site Scripting (XSS) in LearnPress <= 4.4.9 versions.
5.4Mittel
LearnPress WordPress Plugin through 4.4.9.1 Stored XSS via Quiz Question Hint and Explanation
ThimPress LearnPress
LearnPress plugin for WordPress through 4.4.9.1 contains a stored cross-site scripting vulnerability that allows authenticated instructors to inject scripts via quiz question hint and explanation fields. Attackers with the Instructor role can submit unsanitiz…
6.1Mittel
LearnPress <= 4.4.7 - Reflected DOM-Based Cross-Site Scripting via 'orderby' Parameter
thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'orderby' parameter in all versions up to, and including, 4.4.7 due to insufficient input sanitizat…
4.3Mittel
WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability
ThimPress LearnPress
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.10.
5.3Mittel
WordPress LearnPress plugin <= 4.4.9 - Insecure Direct Object References (IDOR) vulnerability
ThimPress LearnPress
Authorization Bypass Through User-Controlled Key vulnerability in ThimPress LearnPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects LearnPress: from n/a through 4.4.9.
7.5Hoch
LearnPress <= 4.4.8 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'item_id' Parameter
thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.4.8 via the CourseMaterialTemplate::render_material_items() callback exposed on…
6.4Mittel
LearnPress <= 4.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layout_custom_css'
thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'layout_custom_css' parameter in all versions up to, and including, 4.3.9.1 due to insufficient input sanitizati…
5.4Mittel
LearnPress WordPress Plugin < 4.4.6 Stored XSS via Quiz Question Answer Titles
ThimPress LearnPress
LearnPress WordPress Plugin before 4.4.6 contains a stored cross-site scripting vulnerability that allows authenticated attackers with the Instructor role to inject persistent malicious payloads by submitting unsanitized input into quiz question answer title …
4.3Mittel
LearnPress WordPress Plugin < 4.4.6 Broken Object-Level Authorization via Quiz Answer Insert
ThimPress LearnPress
LearnPress WordPress Plugin before 4.4.6 contains a broken object-level authorization vulnerability that allows authenticated attackers with the Instructor role to add answers to quiz questions owned by other instructors by exploiting a missing ownership chec…
4.9Mittel
LearnPress <= 4.4.4 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
The LearnPress plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter of the export_order_csv AJAX action in versions up to, and including, 4.4.4. This is due to insufficient escaping on the user supplied parameter and lack of suffici…
4.4Mittel
LearnPress <= 4.4.4 - Missing Authorization to Authenticated (Editor+) Limited Option Update via 'field_name' Parameter
thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
The LearnPress plugin for WordPress is vulnerable to unauthorized modification of arbitrary WordPress options in versions up to, and including, 4.4.4 via the learnpress_create_page AJAX action. The LP_Admin_Ajax::create_page() handler only checks the edit_pag…
9.3Kritisch
WordPress RealPress plugin <= 1.1.2 - SQL Injection vulnerability
ThimPress RealPress
Unauthenticated SQL Injection in RealPress <= 1.1.2 versions.
6.4Mittel
WP Hotel Booking <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'widget_search' Shortcode Attribute
thimpress WP Hotel Booking
The WP Hotel Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'widget_search' Shortcode Attribute in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for a…
7.1Hoch
WordPress Coaching theme <= 3.9.2 - Cross Site Scripting (XSS) vulnerability
ThimPress. Coaching
Unauthenticated Cross Site Scripting (XSS) in Coaching <= 3.9.2 versions.
6.1Mittel
WP Hotel Booking <= 2.3.2 - Reflected Cross-Site Scripting via 'check_in_date' Parameter
thimpress WP Hotel Booking
The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'check_in_date' parameter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unau…
7.5Hoch
LearnPress <= 4.4.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure via /lp/v1/users/check-answer and /start-quiz REST Endpoints
thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.1 via the check_answer. This makes it possible for unauthenticated attacker…