The LearnPress plugin for WordPress allows authenticated remote attackers with minimal permissions to create pages with arbitrary titles, or modify the publication status of any existing page, via the learnpress_create_page or learnpress_update_order_status AJAX actions.
CPE | Name | Operator | Version |
---|---|---|---|
learnpress | lt | 3.2.6.9 |