Lucene search
+L

CVE-2020-26876

🗓️ 07 Oct 2020 16:56:25Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 102 Views🌐 WEB

The wp-courses plugin through 2.0.27 for WordPress allows bypass of payment step via /wp-json REST AP

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2020-26876
16 Jan 202404:21
circl
cvelist
Cvelist
CVE-2020-26876
7 Oct 202016:56
cvelist
nuclei
Nuclei
WordPress WP Courses Plugin Information Disclosure
22 Sep 202602:05
nuclei
nvd
NVD
CVE-2020-26876
7 Oct 202017:15
nvd
osv
OSV
CVE-2020-26876
7 Oct 202017:15
osv
patchstack
Patchstack
WordPress WP Courses LMS plugin <= 2.0.28 - Broken Access Controls leading to Courses Content Disclosure vulnerability
28 Sep 202000:00
patchstack
prion
Prion
Design/Logic Flaw
7 Oct 202017:15
prion
redhatcve
RedhatCVE
CVE-2020-26876
22 May 202516:34
redhatcve
vulncheck_kev
VulnCheck KEV
VulnCheck KEV: CVE-2020-26876
7 Oct 202000:00
vulncheck_kev
wpvulndb
WPVulnDB
WP Courses < 2.0.29 - Broken Access Controls leading to Courses Content Disclosure
28 Sep 202000:00
wpvulndb
NVD
Node
wpcoursespluginwp-coursesRange2.0.27wordpress
ParameterPositionPathDescriptionCWE
show_in_restpath/wp-json/wp/v2/courseRemote attackers can bypass the intended payment step via REST API due to show_in_rest being enabled for the course CPT, enabling access to course content without proper payment checks.CWE-306
show_in_restpath/wp-json/wp/v2/lessonRemote attackers can bypass the intended payment step via REST API due to show_in_rest being enabled for the lesson CPT, enabling access to lesson content without proper payment checks.CWE-306

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 03:08Current
7.5High risk
Vulners AI Score7.5
CVSS 25
CVSS 3.17.5
EPSS0.10551
102