WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
learnpress
Published
2023-01-24
Title
LearnPress Plugin < 4.2.0 - Unauthenticated SQLi
Slug
learnpress
Published
2023-01-24
Title
LearnPress Plugin < 4.2.0 - Subscriber+ SQLi
Slug
learnpress
Published
2023-11-17
Title
LearnPress < 4.2.5.5 - Reflected Cross-Site Scripting
Slug
learnpress
Published
2024-01-02
Title
LearnPress < 4.2.5.8 - Unauthenticated SQLi
Slug
learnpress
Published
2024-01-02
Title
LearnPress < 4.2.5.8 - Subscriber+ Arbitrary Course Progress Disclosure
Slug
learnpress
Published
2024-01-03
Title
LearnPress < 4.2.5.8 - Unauthenticated Command Injection
Slug
learnpress
Published
2024-04-04
Title
LearnPress < 4.2.6.4 - Authenticated(LP Instructor+) Stored Cross-Site Scripting
Slug
learnpress
Published
2024-04-04
Title
LearnPress < 4.2.6.4 - Insecure Direct Object Reference
Slug
learnpress
Published
2024-04-04
Title
LearnPress – WordPress LMS Plugin < 4.0.1 - Cross-Site Request Forgery to Privilege Escalation
Slug
learnpress
Published
2024-04-18
Title
LearnPress – WordPress LMS Plugin < 4.2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
learnpress
Published
2024-05-09
Title
LearnPress – WordPress LMS Plugin < 4.2.6.6 - Authenticated (Instructor+) Arbitrary File Upload
Slug
learnpress
Published
2024-05-09
Title
LearnPress – WordPress LMS Plugin < 4.2.6.6 - Unauthenticated Bypass to User Registration
Slug
learnpress
Published
2024-05-09
Title
LearnPress – WordPress LMS Plugin < 4.2.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_html Parameter
Slug
learnpress
Published
2024-05-21
Title
LearnPress – WordPress LMS Plugin < 4.2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Slug
learnpress
Published
2024-05-09
Title
LearnPress – WordPress LMS Plugin < 4.2.6.6 - Unauthenticated Time-Based SQL Injection
Slug
learnpress
Published
2024-06-04
Title
LearnPress – WordPress LMS Plugin < 4.2.6.8.1 - Basic Information Disclosure via JSON API
Slug
learnpress
Published
2024-07-01
Title
LearnPress – WordPress LMS Plugin < 4.2.6.8.2 - Missing Authorization to Unauthenticated User Registration Bypass
Slug
learnpress
Published
2024-07-01
Title
LearnPress – WordPress LMS Plugin < 4.2.6.8.2 - Unauthenticated Bypass to User Registration
Slug
learnpress
Published
2024-07-24
Title
LearnPress < 4.2.6.9 - Authenticated (Contributor+) Local File Inclusion
Slug
learnpress
Published
2024-08-01
Title
LearnPress < 4.2.6.9 - Cross-Site Request Forgery
Slug
learnpress
Published
2024-08-01
Title
LearnPress < 4.2.6.9 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
learnpress
Published
2024-08-07
Title
LearnPress – WordPress LMS Plugin < 4.2.6.9.4 - Authenticated (Contributor+) SQL Injection via order Parameter
Slug
learnpress
Published
2024-09-11
Title
LearnPress – WordPress LMS Plugin < 4.2.7.1 - Unauthenticated SQL Injection via 'c_fields'
Slug
learnpress
Published
2024-09-11
Title
LearnPress – WordPress LMS Plugin < 4.2.7.1 - Unauthenticated SQL Injection via 'c_only_fields'
Slug
learnpress
Published
2024-11-21
Title
LearnPress < 4.2.7.2 - Admin+ Stored XSS