5.4Orta
WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability
ThimPress LearnPress
Subscriber Broken Access Control in LearnPress <= 4.4.10 versions.
ThimPress. güvenlik açıkları (CVE)
ThimPress. için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses 45LearnPress 36WP Hotel Booking 17WP Pipes 9LearnPress Export Import 5LearnPress – Backup & Migration Tool 4Thim Elementor Kit 4Eduma 4Thim Core 3LearnPress – WordPress LMS Plugin 3Sailing 2Thim Kit for Elementor – Pre-built Templates & Widgets for Elementor 2WP Events Manager 2RealPress 2Resca 1FundPress – WordPress Donation Plugin 1Ivy School 1Thim Blocks 1LearnPress – Course Review 1BuilderPress 1LearnPress – Sepay Payment 1Coaching 1Course Builder 1FundPress 1
7.5Yüksek
WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability
ThimPress LearnPress
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11.
5.3Orta
WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability
ThimPress LearnPress
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11.
5.4Orta
WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability
ThimPress LearnPress
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11.
5.4Orta
LearnPress before 4.4.10 Missing Authorization via Legacy Editor AJAX Handlers
ThimPress LearnPress
LearnPress before 4.4.10 contains a missing authorization vulnerability in the admin_course_editor, admin_quiz_editor and admin_question_editor lp-ajax actions, allowing instructors to modify other instructors' content. Authenticated instructors can reuse the…
5.4Orta
WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability
ThimPress LearnPress
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.10.
6.5Orta
LearnPress <= 4.4.10 - Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration via 'search-authors' AJAX Action
thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.10 This is due to the plugin not properly verifying that a user is authorized to perf…
9.8Kritik
LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter
thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10 via deserialization of untrusted input from the 'checkout-email' request parameter during the checkout AJAX action. The value is passed through …
2.5%EPSS
7.2Yüksek
LearnPress <= 4.4.10 - Unauthenticated Stored Cross-Site Scripting via 'quantity' and 'order_comments' Parameters
thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'quantity (REST) / order_comments (checkout)' parameter in all versions up to, and including, 4.4.10 due to insu…
7.1Yüksek
WordPress LearnPress plugin <= 4.4.9 - Cross Site Scripting (XSS) vulnerability
ThimPress LearnPress
Unauthenticated Cross Site Scripting (XSS) in LearnPress <= 4.4.9 versions.
5.4Orta
LearnPress WordPress Plugin through 4.4.9.1 Stored XSS via Quiz Question Hint and Explanation
ThimPress LearnPress
LearnPress plugin for WordPress through 4.4.9.1 contains a stored cross-site scripting vulnerability that allows authenticated instructors to inject scripts via quiz question hint and explanation fields. Attackers with the Instructor role can submit unsanitiz…
6.1Orta
LearnPress <= 4.4.7 - Reflected DOM-Based Cross-Site Scripting via 'orderby' Parameter
thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'orderby' parameter in all versions up to, and including, 4.4.7 due to insufficient input sanitizat…
4.3Orta
WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability
ThimPress LearnPress
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.10.
5.3Orta
WordPress LearnPress plugin <= 4.4.9 - Insecure Direct Object References (IDOR) vulnerability
ThimPress LearnPress
Authorization Bypass Through User-Controlled Key vulnerability in ThimPress LearnPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects LearnPress: from n/a through 4.4.9.
7.5Yüksek
LearnPress <= 4.4.8 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'item_id' Parameter
thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.4.8 via the CourseMaterialTemplate::render_material_items() callback exposed on…
6.4Orta
LearnPress <= 4.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layout_custom_css'
thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'layout_custom_css' parameter in all versions up to, and including, 4.3.9.1 due to insufficient input sanitizati…
5.4Orta
LearnPress WordPress Plugin < 4.4.6 Stored XSS via Quiz Question Answer Titles
ThimPress LearnPress
LearnPress WordPress Plugin before 4.4.6 contains a stored cross-site scripting vulnerability that allows authenticated attackers with the Instructor role to inject persistent malicious payloads by submitting unsanitized input into quiz question answer title …
4.3Orta
LearnPress WordPress Plugin < 4.4.6 Broken Object-Level Authorization via Quiz Answer Insert
ThimPress LearnPress
LearnPress WordPress Plugin before 4.4.6 contains a broken object-level authorization vulnerability that allows authenticated attackers with the Instructor role to add answers to quiz questions owned by other instructors by exploiting a missing ownership chec…
4.9Orta
LearnPress <= 4.4.4 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
The LearnPress plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter of the export_order_csv AJAX action in versions up to, and including, 4.4.4. This is due to insufficient escaping on the user supplied parameter and lack of suffici…
4.4Orta
LearnPress <= 4.4.4 - Missing Authorization to Authenticated (Editor+) Limited Option Update via 'field_name' Parameter
thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
The LearnPress plugin for WordPress is vulnerable to unauthorized modification of arbitrary WordPress options in versions up to, and including, 4.4.4 via the learnpress_create_page AJAX action. The LP_Admin_Ajax::create_page() handler only checks the edit_pag…
9.3Kritik
WordPress RealPress plugin <= 1.1.2 - SQL Injection vulnerability
ThimPress RealPress
Unauthenticated SQL Injection in RealPress <= 1.1.2 versions.
6.4Orta
WP Hotel Booking <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'widget_search' Shortcode Attribute
thimpress WP Hotel Booking
The WP Hotel Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'widget_search' Shortcode Attribute in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for a…
7.1Yüksek
WordPress Coaching theme <= 3.9.2 - Cross Site Scripting (XSS) vulnerability
ThimPress. Coaching
Unauthenticated Cross Site Scripting (XSS) in Coaching <= 3.9.2 versions.
6.1Orta
WP Hotel Booking <= 2.3.2 - Reflected Cross-Site Scripting via 'check_in_date' Parameter
thimpress WP Hotel Booking
The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'check_in_date' parameter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unau…
7.5Yüksek
LearnPress <= 4.4.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure via /lp/v1/users/check-answer and /start-quiz REST Endpoints
thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.1 via the check_answer. This makes it possible for unauthenticated attacker…