CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The LearnPress plugin for WordPress is vulnerable to Command Injection in all versions up to, and including, 4.2.5.7 via the get_content function. This is due to the plugin making use of the call_user_func function with user input. This makes it possible for unauthenticated attackers to execute any public function with one parameter, which could result in remote code execution.
Explanation of Vulnerability in Simple Terms
LearnPress versions up to 4.2.5.7 contain an argument injection vulnerability that allows unauthenticated attackers to execute arbitrary code on the site. The vulnerability exists in how the plugin processes user-supplied input without proper validation. No user interaction is required for exploitation. Site administrators should update immediately to a version newer than 4.2.5.7.
What an attacker can do
Run arbitrary code on the site without authentication.
Potential impact on your site
Complete site compromise: attackers can steal data, modify content, create admin accounts, or take the site offline.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
