Description
WordPress Plugin LearnPress-WordPress LMS is prone to a vulnerability that lets attackers write or overwrite arbitrary files on an affected computer in the context of the web server. An attacker can exploit this vulnerability to write or overwrite arbitrary files. This may facilitate unauthorized access or privilege escalation; other attacks are also possible. WordPress Plugin LearnPress-WordPress LMS version 3.2.2 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 3.2.3 or latest
References
Related Vulnerabilities
Oracle Database Server CVE-2006-0259 Vulnerability (CVE-2006-0259)
Joomla! Core Security Bypass (2.5.0 - 3.9.15)
WordPress Plugin Lightweight Sidebar Manager Cross-Site Request Forgery (1.1.4)
WebLogic CVE-2020-14820 Vulnerability (CVE-2020-14820)
WordPress Plugin WP Server Log Viewer Cross-Site Scripting (1.0)