Description

WordPress Plugin LearnPress-WordPress LMS is prone to a vulnerability that lets attackers write or overwrite arbitrary files on an affected computer in the context of the web server. An attacker can exploit this vulnerability to write or overwrite arbitrary files. This may facilitate unauthorized access or privilege escalation; other attacks are also possible. WordPress Plugin LearnPress-WordPress LMS version 3.2.2 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 3.2.3 or latest

References

https://www.pluginvulnerabilities.com/2018/12/21/our-plugin-security-checker-lead-to-finding-a-file-writing-vulnerability-in-a-wordpress-plugin-with-50000-installs/

https://plugins.svn.wordpress.org/learnpress/trunk/readme.txt

Related Vulnerabilities

WordPress Plugin Contact Form 7 Database Addon-CFDB7 Unspecified Vulnerability (1.2.5.3)

Magento Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2019-7925)

MODX Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-7324)

Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-44946)

WordPress Plugin Change Password and E-mail Cross-Site Scripting (1.0)

Severity

High

Classification

CWE-285 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Tags

Missing Update