CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthenticated bypass to user registration in versions up to, and including, 4.2.6.8.1. This is due to missing checks in the 'check_validate_fields' function in the checkout. This makes it possible for unauthenticated attackers to register as the default role on the site, even if registration is disabled.
Explanation of Vulnerability in Simple Terms
LearnPress versions up to 4.2.6.8.1 expose sensitive course information to unauthenticated users. An attacker can read course details, pricing, and enrollment data without logging in. The vulnerability stems from insufficient access controls on course data endpoints. Update to a version newer than 4.2.6.8.1 to resolve this issue.
What an attacker can do
Read course details, pricing, and enrollment information without authentication.
Potential impact on your site
Course content, pricing, and student enrollment data may be exposed to the public.
Conditions required to exploit
Network access to the WordPress site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
