8 matches found
EUVD-2019-6699
Malware in sbrugna...
WordPress nd-learning plugin has an unspecified vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. nd-learning is an online e-learning site builder plugin used in it. An unspecified vulnerability exists in the WordPress nd-learning...
CVE-2019-15775
The nd-learning plugin before 4.8 for WordPress has a nopriv AJAX action that allows modification of the siteurl setting...
CVE-2019-15775
The nd-learning plugin before 4.8 for WordPress has a nopriv AJAX action that allows modification of the siteurl setting...
CVE-2019-15775
The nd-learning plugin before 4.8 for WordPress has a nopriv AJAX action that allows modification of the siteurl setting...
CVE-2019-15775
CVE-2019-15775 affects the WordPress nd-learning plugin (prior to version 4.8). It exposes a nopriv_ AJAX action that can modify the siteurl setting, enabling unauthenticated modification of site configuration. Impact as documented: potential compromise of site URL, with CVSS v3 base score 6.1 (M...
PT-2019-14384
Name of the Vulnerable Software and Affected Versions nd-learning plugin versions prior to 4.8 Description The issue allows modification of the siteurl setting through a nopriv AJAX action. Recommendations For versions prior to 4.8, update the nd-learning plugin to version 4.8 or later to resolve...
