LearnPress – WordPress LMS Plugin for Create and Sell Online Courses vulnerabilities
13 known vulnerabilities in LearnPress – WordPress LMS Plugin for Create and Sell Online Courses from ThimPress. 13 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
LearnPress – WordPress LMS Plugin for Create…: Deserialization of Untrusted Data
The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10 via deserialization of untrusted input from the 'checkout-email' request parameter during the checkout AJAX action. The value is passed through s
- 7.2 High severity
LearnPress – WordPress LMS Plugin for Create…: Improper Neutralization of Input During Web Page Generation
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'quantity (REST) / order_comments (checkout)' parameter in all versions up to, and including, 4.4.10 due to insuf
- 7.5 High severity
LearnPress – WordPress LMS Plugin for Create…: Authorization Bypass Through User-Controlled Key
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.4.8 via the CourseMaterialTemplate::render_material_items() callback exposed on
- 7.5 High severity
LearnPress – WordPress LMS Plugin for Create…: Missing Authorization
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.1 via the check_answer. This makes it possible for unauthenticated attackers
- 9.1 Critical severity
LearnPress – WordPress LMS Plugin for Create…: Missing Authorization
The LearnPress plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the `delete_question_answer()` function in all versions up to, and including, 4.3.2.8. The plugin exposes a `wp_rest` nonce in public frontend
- 7.5 High severity
LearnPress – WordPress LMS Plugin for Create…: Improper Neutralization of Special Elements used in an SQL Command
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_fields' parameter of the /wp-json/lp/v1/courses/archive-course REST API endpoint in all versions up to, and including, 4.2.7 due to insufficient escaping on th
- 7.5 High severity
LearnPress – WordPress LMS Plugin for Create…: Improper Neutralization of Special Elements used in an SQL Command
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_only_fields' parameter of the /wp-json/learnpress/v1/courses REST API endpoint in all versions up to, and including, 4.2.7 due to insufficient escaping on the
- 8.8 High severity
LearnPress – WordPress LMS Plugin for Create…: Improper Control of Filename for Include/Require Statement in PHP Program
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.2.6.8.2 via the 'render_content_block_template' function. This makes it possible for authenticated attackers, with Contribu
- 9.8 Critical severity
LearnPress – WordPress LMS Plugin for Create…: Improper Neutralization of Special Elements used in an SQL Command
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the ‘term_id’ parameter in versions up to, and including, 4.2.6.5 due to insufficient escaping on the user supplied parameter and lack of sufficient prepar
- 8.8 High severity
LearnPress – WordPress LMS Plugin for Create…: Unrestricted Upload of File with Dangerous Type
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'save_post_materials' function in versions up to, and including, 4.2.6.5. This makes it possible for authenticated att
- 8.8 High severity
LearnPress – WordPress LMS Plugin for Create…: Cross-Site Request Forgery
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.0.0. This is due to missing or incorrect nonce validation on the filter_users functions. This makes it possible for u
- 9.8 Critical severity
LearnPress – WordPress LMS Plugin for Create…: Improper Neutralization of Special Elements used in a Command
The LearnPress plugin for WordPress is vulnerable to Command Injection in all versions up to, and including, 4.2.5.7 via the get_content function. This is due to the plugin making use of the call_user_func function with user input. This makes it possible for u
- 7.5 High severity
LearnPress – WordPress LMS Plugin for Create…: Improper Neutralization of Special Elements used in an SQL Command
The LearnPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order_by’ parameter in all versions up to, and including, 4.2.5.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the exist