Description

WordPress Plugin LearnPress-WordPress LMS is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently change the role of all users to Instructor, create new pages or change the status of any existing post or page. WordPress Plugin LearnPress-WordPress LMS version 3.2.6.8 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 3.2.6.9 or latest

References

https://www.wordfence.com/blog/2020/04/high-severity-vulnerabilities-patched-in-learnpress/

https://www.exploit-db.com/exploits/50138

https://packetstormsecurity.com/files/163538/WordPress-LearnPress-Privilege-Escalation.html

Related Vulnerabilities

Django Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-9402)

WordPress Plugin Email Queue by BestWebSoft Cross-Site Request Forgery (1.0.0)

WordPress Plugin The Welcomizer 'twiz-index.php' Cross-Site Scripting (1.3.9.4)

Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2019-19343)

ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-4396)

Severity

High

Classification

CVE-2020-11510 CVE-2020-11511 CWE-264 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N

Tags

Missing Update Authentication Bypass