LearnPress Wordpress plugin version prior and including 3.2.6.7 is vulnerable to SQL Injection
References
Configurations
History
21 Nov 2024, 05:34
Type | Values Removed | Values Added |
---|---|---|
References | () http://packetstormsecurity.com/files/163536/WordPress-LearnPress-SQL-Injection.html - | |
References | () https://plugins.trac.wordpress.org/browser/learnpress/trunk/readme.txt?rev=2288975 - Release Notes | |
References | () https://research.checkpoint.com/2020/e-learning-platforms-getting-schooled-multiple-vulnerabilities-in-wordpress-most-popular-learning-management-system-plugins/ - Exploit, Third Party Advisory | |
References | () https://wordpress.org/plugins/learnpress/#developers - Release Notes |
Information
Published : 2020-04-30 15:15
Updated : 2024-11-21 05:34
NVD link : CVE-2020-6010
Mitre link : CVE-2020-6010
CVE.ORG link : CVE-2020-6010
JSON object : View
Products Affected
thimpress
- learnpress
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')