Log out
Get PRO

Latest

Input validation vulnerability in LearnPress – WordPress LMS Plugin 4.1.6.5

  • Severity: medium-risk
  • Status: Fixed
  • Publication: June 14, 2022

The LearnPress – WordPress LMS plugin for WordPress is not secure against malicious attacks in versions up to and including 4.1.6.5. If a user clicks on a link or performs an action that has been maliciously crafted, it could allow an unauthenticated attacker to run scripts on the page. This could lead to personal information being stolen or damage to the page itself. It is important to update the plugin to the most recent version to protect against this type of attack.

Detected in:

LearnPress – WordPress LMS Plugin fixed vulnerable versions: >= * <= 4.1.6.5
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.