LearnPress – WordPress LMS Plugin

Information

Software Type Plugin
Software Slug learnpress (view on wordpress.org)
Software Status Active
Software Author thimpress
Software Website thimpress.com
Software Downloads 4,174,836
Software Active Installs 90,000
Software Record Last Updated April 20, 2024

Showing 1-20 of 31 Vulnerabilities

5.4
CVE ID Unknown
Jul 6, 2023
Researchers:
Title CVE ID CVSS Researchers Date
LearnPress – WordPress LMS Plugin <= 4.2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-3560 6.4 stealthcopter April 18, 2024
LearnPress – WordPress LMS Plugin <= 4.0.0 - Cross-Site Request Forgery to Privilege Escalation CVE-2024-2115 8.8 Tim Coen April 4, 2024
LearnPress <= 4.2.6.3 - Authenticated(LP Instructor+) Stored Cross-Site Scripting CVE-2024-1463 4.4 drop April 4, 2024
LearnPress <= 4.2.6.3 - Insecure Direct Object Reference CVE-2024-1289 6.5 drop April 4, 2024
LearnPress <= 4.2.5.7 - Command Injection CVE-2023-6634 8.1 hir0ot January 3, 2024
LearnPress <= 4.2.5.7 - Unauthenticated SQL Injection via order_by CVE-2023-6567 9.8 hir0ot January 2, 2024
LearnPress <= 4.2.5.7 - Insecure Direct Object Reference to Information Disclosure CVE-2023-6223 4.3 lttn January 2, 2024
LearnPress <= 4.2.5.3 - Reflected Cross-Site Scripting via add_internal_scripts_to_head CVE-2023-5558 6.1 Vitor Pacheco November 7, 2023
LearnPress <= 4.2.3 - Missing Authorization 5.4 July 6, 2023
LearnPress <= 4.2.3 - Missing Authorization CVE-2023-36516 5.4 Rafie Muhammad July 4, 2023
LearnPress <= 4.2.3 - Missing Authorization to Information Exposure CVE-2023-36515 7.3 Rafie Muhammad July 4, 2023
LearnPress <= 4.1.7.3.2 - Unauthenticated SQL Injection CVE-2022-45808 9.8 Fadilah Agung Nugraha January 20, 2023
LearnPress <= 4.1.7.3.2 - Unauthenticated Local File Inclusion CVE-2022-47615 9.8 Rafie Muhammad January 20, 2023
LearnPress <= 4.1.7.3.2 - Authenticated (Subscriber+) SQL Injection CVE-2022-45820 8.8 Rafie Muhammad December 20, 2022
LearnPress <= 4.1.7.1 - Unauthenticated PHP Object Injection CVE-2022-3360 9.8 Nguyen Duy Quoc Khanh October 3, 2022
LearnPress – WordPress LMS Plugin <= 4.1.6.7 - Reflected Cross-Site Scripting 6.1 July 5, 2022
LearnPress – WordPress LMS Plugin <= 4.1.6.5 - Reflected Cross-Site Scripting 6.1 June 14, 2022
LearnPress <= 4.1.5 - Reflected Cross-Site Scripting CVE-2022-0271 6.1 Krzysztof Zając March 16, 2022
LearnPress <= 4.1.4.1 - Arbitrary Image Renaming CVE-2022-0377 4.3 Ceylan Bozogullarindan January 26, 2022
LearnPress <= 4.1.3 - Authenticated SQL Injection CVE-2021-24951 9.8 ZhongFu Su November 9, 2021

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation