CVE-2025-11372mediumexploração observadaCWE-862

CVE-2025-11372: falha de média gravidade em thimpress LearnPress – WordPress LMS Plugin…

LearnPress – WordPress LMS Plugin <= 4.2.9.3 - Missing Authorization to Unauthenticated Database Table Manipulation

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar LearnPress – WordPress LMS Plugin for Create and Sell Online Courses

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

35Vexday Risk Score

Priorize a correção. Ela exploração observada pelo VulnCheck.

ssvc Attendcvss 6.5epss 0.5%
da publicação à arma
Publicada no NVD18 de out.
VulnCheck18 de out.
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to modification of data in all versions up to, and including, 4.2.9.2. This is due to missing capability checks on the Admin Tools REST endpoints which are registered with permission_callback set to __return_true. This makes it possible for unauthenticated attackers to perform destructive database operations including dropping indexes on any table (including WordPress core tables like wp_options), creating duplicate configuration entries, and degrading site performance via the /wp-json/lp/v1/admin/tools/create-indexs endpoint granted they can provide table names.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Produtos afetados
thimpress · LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
CVEs relacionadas — thimpress LearnPress – WordPress LMS Plugin…

No mesmo produto, das mais perigosas para as menos.

CVE-2024-8522CRITICALLearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields'EPSS 62.9%CVE-2023-6567CRITICALLearnPress <= 4.2.5.7 - Unauthenticated SQL Injection via order_byEPSS 51.4%CVE-2024-4434CRITICALLearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Time-Based SQL InjectionEPSS 36.9%CVE-2024-8529CRITICALLearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'EPSS 12.1%CVE-2023-6634HIGHLearnPress <= 4.2.5.7 - Command InjectionEPSS 8.6%CVE-2026-104736CRITICALLearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' ParameterEPSS 2.5%