Lucene search

K
wpvulndbRamuel GallWPVDB-ID:D9E0311D-8430-4C9F-9B04-8CD022C9B7C0
HistoryApr 28, 2020 - 12:00 a.m.

LearnPress < 3.2.6.9 - Authenticated Post Creation and Status Modification

2020-04-2800:00:00
Ramuel Gall
wpscan.com
11

The LearnPress plugin for WordPress allows authenticated remote attackers with minimal permissions to create pages with arbitrary titles, or modify the publication status of any existing page, via the learnpress_create_page or learnpress_update_order_status AJAX actions.

CPENameOperatorVersion
learnpresslt3.2.6.9
Related for WPVDB-ID:D9E0311D-8430-4C9F-9B04-8CD022C9B7C0