2 matches found
Design/Logic Flaw
The LifterLMS – WordPress LMS Plugin for eLearning plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'processreview' function in all versions up to, and including, 7.5.1. This makes it possible for unauthenticated attackers to publish...
5CVSS6.9AI score0.00674EPSS
SaveExploits0References2
CVE-2024-0377: Improper Access Control
The LifterLMS – WordPress LMS Plugin for eLearning plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'processreview' function in all versions up to, and including, 7.5.1. This makes it possible for unauthenticated attackers to publish...
5.3CVSS5.7AI score0.00674EPSS
SaveExploits0References3
20