LearnPress – WordPress LMS Plugin vulnerabilities
We track 1 vulnerability in LearnPress – WordPress LMS Plugin products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 31, 2022.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest LearnPress – WordPress LMS Plugin vulnerabilities
- 8.1 High severity
LearnPress – WordPress LMS Plugin: Deserialization of Untrusted Data
The LearnPress WordPress plugin before 4.1.7.2 unserialises user input in a REST API endpoint available to unauthenticated users, which could lead to PHP Object Injection when a suitable gadget is present, leadint to remote code execution (RCE). To successfull