CVE-2018-16174: falha em ThimPress LearnPress
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 1.0%
Open redirect vulnerability in LearnPress prior to version 3.1.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Produtos afetados
ThimPress · LearnPressCVEs relacionadas — ThimPress LearnPress
No mesmo produto, das mais perigosas para as menos.
CVE-2018-16175—CVE-2018-16175EPSS 1.3%CVE-2018-16173—CVE-2018-16173EPSS 1.0%CVE-2023-36516HIGHWordPress LearnPress plugin <= 4.2.3 - Authenticated Broken Access Control vulnerabilityEPSS 0.5%CVE-2023-36515HIGHWordPress LearnPress plugin <= 4.2.3 - Unauthenticated Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-39642MEDIUMWordPress LearnPress plugin <= 4.2.6.8.2 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.4%CVE-2026-115599HIGHWordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerabilityEPSS 0.3%