Lucene search
PRIOn knowledge basePRION:CVE-2023-6634HistoryJan 11, 2024 - 9:15 a.m.
Command injection
2024-01-1109:15:00
PRIOn knowledge base
www.prio-n.com
7
wordpress
learnpress
plugin
command injection
vulnerability
remote code execution
The LearnPress plugin for WordPress is vulnerable to Command Injection in all versions up to, and including, 4.2.5.7 via the get_content function. This is due to the plugin making use of the call_user_func function with user input. This makes it possible for unauthenticated attackers to execute any public function with one parameter, which could result in remote code execution.
| CPE | Name | Operator | Version |
|---|---|---|---|
| learnpress | le | 4.2.5.7 |
Related
cvelist
cvelist
CVE-2023-6634
2024-01-11 08:32:28
wpvulndb
wpvulndb
LearnPress < 4.2.5.8 - Unauthenticated Command Injection
2024-01-04 00:00:00
nvd
nvd
CVE-2023-6634
2024-01-11 09:15:50
nuclei
nuclei
LearnPress < 4.2.5.8 - Remote Code Execution
2024-01-14 16:27:50
cve
cve
CVE-2023-6634
2024-01-11 09:15:50
githubexploit
githubexploit
Exploit for Command Injection in Thimpress Learnpress
2024-04-05 18:07:08
nessus
nessus
LearnPress Plugin for WordPress < 4.2.5.8 Multiple Vulnerabilities
2024-01-24 00:00:00
wordfence
wordfence