WordPress LearnPress Plugin <= 4.2.5.7 is vulnerable to Remote Code Execution (RCE)

🗓️ 04 Jan 2024 00:00:00Reported by hir0otType

WordPress LearnPress Plugin <= 4.2.5.7 Remote Code Execution (RCE) CVE-2023-663

Reporter	Title	Published	Views	Family All 9
Cvelist	CVE-2023-6634	11 Jan 202408:32	–	cvelist
WPVulnDB	LearnPress < 4.2.5.8 - Unauthenticated Command Injection	4 Jan 202400:00	–	wpvulndb
NVD	CVE-2023-6634	11 Jan 202409:15	–	nvd
Nuclei	LearnPress < 4.2.5.8 - Remote Code Execution	14 Jan 202416:27	–	nuclei
CVE	CVE-2023-6634	11 Jan 202409:15	–	cve
Prion	Command injection	11 Jan 202409:15	–	prion
GithubExploit	Exploit for Command Injection in Thimpress Learnpress	5 Apr 202418:07	–	githubexploit
Tenable Nessus	LearnPress Plugin for WordPress < 4.2.5.8 Multiple Vulnerabilities	24 Jan 202400:00	–	nessus
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (January 1, 2024 to January 7, 2024)	11 Jan 202416:24	–	wordfence

Vulners

Node

thimpress learnpressRange≤4.2.5.7wordpress

Source	Link
wordpress	www.wordpress.org/plugins/learnpress/
cve	www.cve.org/CVERecord
wordfence	www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/learnpress/learnpress-4257-command-injection

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Jan 2024 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS39.8

EPSS0.264