Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbWpvulndbWPVDB-ID:21DE39EE-6E56-43F7-8D5D-52E0EC542516
HistoryJan 24, 2023 - 12:00 a.m.

LearnPress Plugin < 4.2.0 - Unauthenticated LFI

2023-01-2400:00:00
wpscan.com
51
learnpress
plugin
unauthenticated
lfi
vulnerability

0.021 Low

EPSS

Percentile

89.1%

JSON

The plugin does not validate various parameters in the lp/v1/courses/archive-course REST endpoints before using them in include statement, which could lead to LFI issues.

CPENameOperatorVersion
learnpresslt4.2.0

Related

cve 1
prion 1
cvelist 1
nvd 1
nuclei 1
githubexploit 1
openvas 1
malwarebytes 1
cve
cve
CVE-2022-47615
2023-01-26 21:18:03
prion
prion
Remote file inclusion
2023-01-26 21:18:00
cvelist
cvelist
CVE-2022-47615 WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to Local File Inclusion
2023-01-24 09:05:26
nvd
nvd
CVE-2022-47615
2023-01-26 21:18:03
nuclei
nuclei
LearnPress Plugin < 4.2.0 - Local File Inclusion
2023-08-23 17:32:09
githubexploit
githubexploit
Exploit for Unrestricted Upload of File with Dangerous Type in Thimpress Learnpress
2023-08-18 15:04:36
openvas
openvas
WordPress LearnPress Plugin <= 4.1.7.3.2 Multiple Vulnerabilities
2023-01-26 00:00:00
malwarebytes
malwarebytes
Update your LearnPress plugins now!
2023-01-30 12:15:00

0.021 Low

EPSS

Percentile

89.1%

JSON
Related for WPVDB-ID:21DE39EE-6E56-43F7-8D5D-52E0EC542516
cve1prion1cvelist1nvd1nuclei1githubexploit1openvas1malwarebytes1