LE
Product
LearnPress
62
CVEs
0
On KEV
9.8
Max CVSS
9
New 30D
Severity mix
Critical 6High 17Medium 39Low 0
Watch
Add LearnPress to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-36515 | 9.8 | Jun 19 | WordPress LearnPress plugin <= 4.2.3 - Unauthenticated Broken Access Control vulnerability Affected: through 4.2.3 |
| CVE-2024-4434 | 9.8 | May 10 | LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Time-Based SQL Injection Affected: before 4.2.6.6 |
| CVE-2023-6634 | 9.8 | Jan 11 | The LearnPress plugin for WordPress is vulnerable to Command Injection in all versions up to, and including, 4.2.5.7 via the get_content function Affected: through 4.2.5.7 |
| CVE-2022-47615 | 9.8 | Jan 26 | Local File Inclusion vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions Affected: before 4.2.0 |
| CVE-2022-45808 | 9.8 | Jan 26 | SQL Injection vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions Affected: through 4.1.7.3.2 |
| CVE-2021-24951 | 9.8 | Dec 13 | The LearnPress WordPress plugin before 4.1.4 does not sanitise, validate and escape the id parameter before using it in SQL statements when duplicating… Affected: before 4.1.4 |
Showing 6