5.4Orta
WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability
ThimPress LearnPress
Subscriber Broken Access Control in LearnPress <= 4.4.10 versions.
ThimPress LearnPress güvenlik açıkları (CVE)
ThimPress LearnPress için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.
7.5Yüksek
WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability
ThimPress LearnPress
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11.
5.3Orta
WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability
ThimPress LearnPress
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11.
5.4Orta
WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability
ThimPress LearnPress
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11.
5.4Orta
LearnPress before 4.4.10 Missing Authorization via Legacy Editor AJAX Handlers
ThimPress LearnPress
LearnPress before 4.4.10 contains a missing authorization vulnerability in the admin_course_editor, admin_quiz_editor and admin_question_editor lp-ajax actions, allowing instructors to modify other instructors' content. Authenticated instructors can reuse the…
5.4Orta
WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability
ThimPress LearnPress
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.10.
7.1Yüksek
WordPress LearnPress plugin <= 4.4.9 - Cross Site Scripting (XSS) vulnerability
ThimPress LearnPress
Unauthenticated Cross Site Scripting (XSS) in LearnPress <= 4.4.9 versions.
5.4Orta
LearnPress WordPress Plugin through 4.4.9.1 Stored XSS via Quiz Question Hint and Explanation
ThimPress LearnPress
LearnPress plugin for WordPress through 4.4.9.1 contains a stored cross-site scripting vulnerability that allows authenticated instructors to inject scripts via quiz question hint and explanation fields. Attackers with the Instructor role can submit unsanitiz…
4.3Orta
WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability
ThimPress LearnPress
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.10.
5.3Orta
WordPress LearnPress plugin <= 4.4.9 - Insecure Direct Object References (IDOR) vulnerability
ThimPress LearnPress
Authorization Bypass Through User-Controlled Key vulnerability in ThimPress LearnPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects LearnPress: from n/a through 4.4.9.
5.4Orta
LearnPress WordPress Plugin < 4.4.6 Stored XSS via Quiz Question Answer Titles
ThimPress LearnPress
LearnPress WordPress Plugin before 4.4.6 contains a stored cross-site scripting vulnerability that allows authenticated attackers with the Instructor role to inject persistent malicious payloads by submitting unsanitized input into quiz question answer title …
4.3Orta
LearnPress WordPress Plugin < 4.4.6 Broken Object-Level Authorization via Quiz Answer Insert
ThimPress LearnPress
LearnPress WordPress Plugin before 4.4.6 contains a broken object-level authorization vulnerability that allows authenticated attackers with the Instructor role to add answers to quiz questions owned by other instructors by exploiting a missing ownership chec…
7.1Yüksek
WordPress LearnPress plugin <= 4.3.6 - Reflected Cross Site Scripting (XSS) vulnerability
ThimPress LearnPress
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThimPress LearnPress allows Reflected XSS. This issue affects LearnPress: from n/a through 4.3.6.
7.5Yüksek
WordPress LearnPress plugin <= 4.2.9.4 - Broken Access Control vulnerability
ThimPress LearnPress
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through <= 4.2.9.4.
6.5Orta
WordPress LearnPress plugin <= 4.2.9.4 - Cross Site Scripting (XSS) vulnerability
ThimPress LearnPress
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThimPress LearnPress learnpress allows Stored XSS.This issue affects LearnPress: from n/a through <= 4.2.9.4.
4.8Orta
LearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSS
LearnPress
The LearnPress WordPress plugin before 4.2.7.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (fo…
4.8Orta
LearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSS
LearnPress
The LearnPress WordPress plugin before 4.2.7.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (fo…
5.3Orta
WordPress LearnPress plugin <= 4.2.7.5 - Broken Access Control vulnerability
ThimPress LearnPress
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through <= 4.2.7.5.
4.7Orta
WordPress Learnpress plugin <= 4.2.7.1 - Open Redirection vulnerability
ThimPress LearnPress
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in ThimPress LearnPress learnpress.This issue affects LearnPress: from n/a through <= 4.2.7.1.
6.4Orta
LearnPress – WordPress LMS Plugin <= 4.2.7.5 - Authenticated (LP Instructor+) Stored Cross-Site Scripting via Lesson Name
thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.2.7.5 due to insufficient input sanitization and output escaping of a lesson name. This makes it possible for authe…
5.3Orta
LearnPress – WordPress LMS Plugin <= 4.2.7.3 - Course Material Sensitive Information Exposure via REST API
thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses; thimpress learnpress
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.7.3 via class-lp-rest-material-controller.php. This makes it possible for unauthenticated attackers to extract…
1.2%EPSS
10.0Kritik
LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'
thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses; thimpress learnpress
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_fields' parameter of the /wp-json/lp/v1/courses/archive-course REST API endpoint in all versions up to, and including, 4.2.7 due to insufficient escaping on t…
12%EPSS
10.0Kritik
LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields'
thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses; thimpress learnpress
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_only_fields' parameter of the /wp-json/learnpress/v1/courses REST API endpoint in all versions up to, and including, 4.2.7 due to insufficient escaping on the…
63%EPSS
4.3Orta
WordPress LearnPress plugin <= 4.2.6.8.2 - Cross Site Request Forgery (CSRF) vulnerability
ThimPress LearnPress
Cross-Site Request Forgery (CSRF) vulnerability in ThimPress LearnPress.This issue affects LearnPress: from n/a through 4.2.6.8.2.
6.5Orta
WordPress LearnPress plugin <= 4.2.6.8.2 - Insecure Direct Object References (IDOR) vulnerability
ThimPress LearnPress
Authorization Bypass Through User-Controlled Key vulnerability in ThimPress LearnPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects LearnPress: from n/a through 4.2.6.8.2.