Lucene search

CVE-2024-11868 LearnPress – WordPress LMS Plugin <= 4.2.7.3 - Course Material Sensitive Information Exposure via REST API

🗓️ 10 Dec 2024 12:59:24Reported by WordfenceType

Vulnerability in LearnPress plugin allows sensitive data exposure via REST API for unauthenticated users.

Reporter	Title	Published	Views	Family All 4
NVD	CVE-2024-11868	10 Dec 202413:15	–	nvd
CVE	CVE-2024-11868	10 Dec 202413:15	–	cve
Cvelist	CVE-2024-11868 LearnPress – WordPress LMS Plugin <= 4.2.7.3 - Course Material Sensitive Information Exposure via REST API	10 Dec 202412:24	–	cvelist
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 9, 2024 to December 15, 2024)	19 Dec 202417:13	–	wordfence

[
  {
    "cpes": [
      "cpe:2.3:a:thimpress:learnpress:*:*:*:*:*:wordpress:*:*"
    ],
    "vendor": "thimpress",
    "product": "learnpress",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "4.2.7.3"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3200780/learnpress
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/7bd43980-9193-4a63-adba-720dd1b11699

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Dec 2024 12:24Current

6.9Medium risk

Vulners AI Score6.9

CVSS35.3

EPSS0.0004

SSVC

CWE-284