LE
Product
LearnPress
58
CVEs
0
On KEV
9.8
Max CVSS
8
New 30D
Severity mix
Critical 6High 16Medium 36Low 0
Watch
Add LearnPress to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-36515 | 9.8 | Jun 19 | Missing Authorization vulnerability in ThimPress LearnPress.This issue affects LearnPress: from n/a through 4.2.3 Affected: before 4.2.3.1 |
| CVE-2024-4434 | 9.8 | May 14 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the ‘term_id’ parameter in versions up to, and including, 4.2.6.5 due to… Affected: before 4.2.6.6 |
| CVE-2023-6634 | 9.8 | Jan 11 | The LearnPress plugin for WordPress is vulnerable to Command Injection in all versions up to, and including, 4.2.5.7 via the get_content function Affected: through 4.2.5.7 |
| CVE-2022-47615 | 9.8 | Jan 26 | Local File Inclusion vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions Affected: before 4.2.0 |
| CVE-2022-45808 | 9.8 | Jan 26 | SQL Injection vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions Affected: through 4.1.7.3.2 |
| CVE-2021-24951 | 9.8 | Dec 13 | The LearnPress WordPress plugin before 4.1.4 does not sanitise, validate and escape the id parameter before using it in SQL statements when duplicating… Affected: before 4.1.4 |
Showing 6