CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to bypass to user registration in versions up to, and including, 4.2.6.5. This is due to missing checks in the 'create_account' function in the checkout. This makes it possible for unauthenticated attackers to register as the default role on the site, even if registration is disabled.
Explanation of Vulnerability in Simple Terms
LearnPress versions up to 4.2.6.5 expose sensitive information through improper access controls. An unauthenticated attacker can read data that should be restricted, such as course details or user information. No user interaction is required. Update to a version newer than 4.2.6.5 to resolve this issue.
What an attacker can do
Read sensitive course or user data without authentication.
Potential impact on your site
Unauthorized users can view restricted course information or student data exposed by the plugin.
Conditions required to exploit
Network access to the WordPress site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
