CVE-2024-4397

🗓️ 09 May 2024 20:03:41Reported by WordfenceType

LearnPress WordPress LMS Plugin arbitrary file upload vulnerabilit

Reporter	Title	Published	Views	Family All 10
CNNVD	WordPress plugin LearnPress 安全漏洞	14 May 202400:00	–	cnnvd
Cvelist	CVE-2024-4397 LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Instructor+) Arbitrary File Upload	9 May 202420:03	–	cvelist
EUVD	EUVD-2024-44028	9 May 202420:03	–	euvd
NVD	CVE-2024-4397	14 May 202415:43	–	nvd
Patchstack	WordPress LearnPress plugin <= 4.2.6.5 - Authenticated (Instructor+) Arbitrary File Upload vulnerability	10 May 202401:17	–	patchstack
Patchstack	WordPress LearnPress Plugin <= 4.2.6.5 is vulnerable to Arbitrary File Upload	10 May 202400:00	–	patchstack
RedhatCVE	CVE-2024-4397	5 Feb 202500:20	–	redhatcve
Vulnrichment	CVE-2024-4397 LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Instructor+) Arbitrary File Upload	9 May 202420:03	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (May 6, 2024 to May 12, 2024)	16 May 202413:04	–	wordfence
WPVulnDB	LearnPress – WordPress LMS Plugin < 4.2.6.6 - Authenticated (Instructor+) Arbitrary File Upload	9 May 202400:00	–	wpvulndb

NVD

Vulners

Node

thimpress learnpressRange<4.2.6.6wordpress

[
  {
    "vendor": "thimpress",
    "product": "LearnPress – WordPress LMS Plugin for Create and Sell Online Courses",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "4.2.6.5",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/ec20d5c4-4c41-4ec9-8d0a-ec8f03634f7d
plugins	www.plugins.trac.wordpress.org/browser/learnpress/tags/4.2.6.5/inc/rest-api/v1/frontend/class-lp-rest-material-controller.php
plugins	www.plugins.trac.wordpress.org/changeset/3083657/

08 Apr 2026 19:21Current

7.5High risk

Vulners AI Score7.5

CVSS 3.18.8

EPSS0.09392

SSVC

CWE-434