CVE-2020-6010

LearnPress Wordpress plugin version prior and including 3.2.6.7 is vulnerable to SQL Injection
Configurations

Configuration 1 (hide)

cpe:2.3:a:thimpress:learnpress:*:*:*:*:*:wordpress:*:*

History

21 Nov 2024, 05:34

Type Values Removed Values Added
References () http://packetstormsecurity.com/files/163536/WordPress-LearnPress-SQL-Injection.html - () http://packetstormsecurity.com/files/163536/WordPress-LearnPress-SQL-Injection.html -
References () https://plugins.trac.wordpress.org/browser/learnpress/trunk/readme.txt?rev=2288975 - Release Notes () https://plugins.trac.wordpress.org/browser/learnpress/trunk/readme.txt?rev=2288975 - Release Notes
References () https://research.checkpoint.com/2020/e-learning-platforms-getting-schooled-multiple-vulnerabilities-in-wordpress-most-popular-learning-management-system-plugins/ - Exploit, Third Party Advisory () https://research.checkpoint.com/2020/e-learning-platforms-getting-schooled-multiple-vulnerabilities-in-wordpress-most-popular-learning-management-system-plugins/ - Exploit, Third Party Advisory
References () https://wordpress.org/plugins/learnpress/#developers - Release Notes () https://wordpress.org/plugins/learnpress/#developers - Release Notes

Information

Published : 2020-04-30 15:15

Updated : 2024-11-21 05:34


NVD link : CVE-2020-6010

Mitre link : CVE-2020-6010

CVE.ORG link : CVE-2020-6010


JSON object : View

Products Affected

thimpress

  • learnpress
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')