WPScan
How it worksPricing
Vulnerabilities
WordPressPluginsThemesStatsSubmit vulnerabilities
For developers
StatusAPI detailsCLI scanner
Contact

WordPress Plugin Vulnerabilities

LearnPress – WordPress LMS Plugin

2022-06-22
LearnPress < 4.1.6.7 - Reflected Cross-Site Scripting
Fixed in version 4.1.6.7
2022-03-16
LearnPress < 4.1.6 - Reflected Cross-Site Scripting
Fixed in version 4.1.6
2022-01-26
LearnPress < 4.1.5 - Arbitrary Image Renaming
Fixed in version 4.1.5
2021-11-09
LearnPress < 4.1.4 - Admin+ SQL Injection
Fixed in version 4.1.4
2021-10-18
LearnPress < 4.1.3.2 - Admin+ Stored Cross-Site Scripting
Fixed in version 4.1.3.2
2021-09-20
LearnPress < 4.1.3.1 - Multiple Admin+ Stored Cross-Site Scripting
Fixed in version 4.1.3.1
2020-09-09
LearnPress < 3.2.7.3 - CSRF & XSS
Fixed in version 3.2.7.3
2020-04-29
Learnpress < 3.2.6.8 - Authenticated Time Based Blind SQL Injection
Fixed in version 3.2.6.8
2020-04-28
LearnPress < 3.2.6.9 - Authenticated Post Creation and Status Modification
Fixed in version 3.2.6.9
2020-04-28
LearnPress < 3.2.6.9 - Privilege Escalation to "LP Instructor"
Fixed in version 3.2.6.9
2020-03-16
LearnPress < 3.2.6.7 - Privilege Escalation
Fixed in version 3.2.6.7