CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the catch_lp_ajax function in all versions up to, and including, 4.3.2. This makes it possible for unauthenticated attackers to modify course contents by adding/removing/updating/re-ordering sections or modifying section items.
Explanation of Vulnerability in Simple Terms
LearnPress versions up to 4.3.2 lack proper authorization checks, allowing unauthenticated attackers to modify course or user data via direct requests. The vulnerability requires no user interaction and can be exploited over the network. Site administrators should update to a version newer than 4.3.2 to prevent unauthorized data tampering.
What an attacker can do
Modify course content, user enrollments, or other plugin data without logging in.
Potential impact on your site
Course content, student records, or plugin settings could be altered by anyone on the internet.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
