Lucene search
WpvulndbWPVDB-ID:D65BCF8E-F72C-4C5B-B073-E72001369637HistoryJan 24, 2023 - 12:00 a.m.
LearnPress Plugin < 4.2.0 - Unauthenticated SQLi
2023-01-2400:00:00
wpscan.com
12
learnpress
plugin
unauthenticated
sql injection
sqli
security issue
0.001 Low
EPSS
Percentile
49.5%
The plugin does not properly sanitise and escape the order by parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users
| CPE | Name | Operator | Version |
|---|---|---|---|
| learnpress | lt | 4.2.0 |
Related
prion
prion
Sql injection
2023-01-26 21:17:00
nvd
nvd
CVE-2022-45808
2023-01-26 21:17:54
cve
cve
CVE-2022-45808
2023-01-26 21:17:54
cvelist
cvelist
openvas
openvas
WordPress LearnPress Plugin <= 4.1.7.3.2 Multiple Vulnerabilities
2023-01-26 00:00:00
malwarebytes
malwarebytes
Update your LearnPress plugins now!
2023-01-30 12:15:00