Not rated
CVE-2021-24951 The LearnPress WordPress plugin before 4.1.4 does not sanitise, validate and escape the id parameter before using it…
Description
The LearnPress WordPress plugin before 4.1.4 does not sanitise, validate and escape the id parameter before using it in SQL statements when duplicating course/lesson/quiz/question, leading to SQL Injections issues
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| LearnPress – WordPress LMS Plugin 4.1 | earliest → < 4.1.4 | 4.1.4 |
Other CVEs of LearnPress – WordPress LMS Plugin
The 4 CVEs of LearnPress – WordPress LMS Plugin →
CVE-2022-3360
The LearnPress WordPress plugin before 4.1.7.2 unserialises user input in a REST API endpoint available to…
8.1
High
CVE-2022-0271
The LearnPress WordPress plugin before 4.1.6 does not sanitise and escape the lp-dismiss-notice before outputting it…
Not rated
CVE-2021-24702
The LearnPress WordPress plugin before 4.1.3.1 does not properly sanitize or escape various inputs within course…
Not rated