LearnPress – WordPress LMS Plugin for Create and Sell Online Courses < 4.4.6 - Missing Authorization

Description

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 4.4.5. This is due to a missing capability check on a function. This makes it possible for authenticated attackers, with instructor-level access, to add quiz questions to quizzes owned by other instructors.