CVE-2021-24951: vulnerability in LearnPress – WordPress LMS Plugin
LearnPress < 4.1.4 - Admin+ SQL Injection
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.6%
exploitation probability
1.6%top 25% of all CVEs
observed exploitation
nono source reports it
The LearnPress WordPress plugin before 4.1.4 does not sanitise, validate and escape the id parameter before using it in SQL statements when duplicating course/lesson/quiz/question, leading to SQL Injections issues
Affected products
Unknown · LearnPress – WordPress LMS PluginRelated CVEs — LearnPress – WordPress LMS Plugin
In the same product, most dangerous first.