Lucene search
WpvulndbWPVDB-ID:9215B11F-26AE-4A66-9971-BC8347D510E3HistorySep 28, 2020 - 12:00 a.m.
WP Courses < 2.0.29 - Broken Access Controls leading to Courses Content Disclosure
2020-09-2800:00:00
wpscan.com
9
wordpress
courses
access controls
rest api
security
EPSS
0.089
Percentile
94.6%
The plugin does not protect the courses which could be accessed by unauthenticated users using the REST API (/wp-jon/) endpoints. This could result in attackers accessing paying content without authorisation.
Related
patchstack
patchstack
cvelist
cvelist
CVE-2020-26876
2020-10-07 16:56:25
cve
cve
CVE-2020-26876
2020-10-07 17:15:15
nuclei
nuclei
WordPress WP Courses Plugin Information Disclosure
2020-10-20 16:46:12
nvd
nvd
CVE-2020-26876
2020-10-07 17:15:15
prion
prion
Design/Logic Flaw
2020-10-07 17:15:00